diff --git a/cloudflared/README.md b/cloudflared/README.md
index 55a72f6..bfd4ad8 100644
--- a/cloudflared/README.md
+++ b/cloudflared/README.md
@@ -8,6 +8,11 @@ This service creates the shared `cloudflare-exposed` bridge
 network. Any service that needs external access must join
 this network.
 
+The tunnel also attaches to the `dokploy-network` so it can
+reach services that are only published on that network
+(those that don't declare `cloudflare-exposed`). Dokploy
+provides `dokploy-network` automatically on deploy.
+
 ## How It Works
 
 1. The `cloudflared` container establishes a tunnel
diff --git a/cloudflared/docker-compose.yml b/cloudflared/docker-compose.yml
index b234279..b102fe2 100644
--- a/cloudflared/docker-compose.yml
+++ b/cloudflared/docker-compose.yml
@@ -18,6 +18,7 @@ services:
       start_period: 30s
     networks:
       - cloudflare-exposed
+      - dokploy-network
     environment:
       - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}
     logging: