Loading...
Caption
Getting your self hosted services outside access is important for some. If you can't or don't want to deal with port forwarding, nginx and so on, you can just use cloudflare tunnels. I've shown in videos in the past how to set umit up, but it's always at the end of the video, so this is one for you that is just about. How to set up a cloudflare tunnel on your homelab.
Performance Category
Above Average
Score
4.4/5
Shares: 5/5
Comments: 5/5
Retention: 3/5
Views: 5/5
Likes: 5/5
Followers: 5/5
Script: 3.0/5
Total Views
63004
Likes
2865
Shares
207
Comments
103
Duration
5m 16s
Traffic Sources
For You
56,641
89.9% of views
Personal Profile
2,268
3.6% of views
Search
2,205
3.5% of views
Others
1,449
2.3% of views
Follow
441
0.7% of views
Sound
0
0.0% of views
Performance vs Median
Views
+1353.9%
Likes
+1862.3%
Shares
+4040.0%
Comments
+1044.4%
For You Traffic
+1769.0%
Profile Traffic
0%
Search Traffic
+2731.7%
Audience Origin
Non-Followers
85.0%
53,553 views
Followers
15.0%
9,451 views
33.4% of followers reached
Audience Growth
New Followers
282
Performance vs Median
+5540.0%
Transcript
No transcript available.
Generate Script Scorecard
Extract Actions & Impact
Script Scorecard
No scorecard available.
Run the script scorecard evaluation to generate insights.
Action & Impact
Run the AI evaluation to identify actions and analyze their impact.
Actionable Tips
No tips available.
Run the script scorecard evaluation to generate actionable tips.
ondrqqSMP@ondrqqSMP:pls some guy I need help I have cgnat so no ipv4 and I have .net domain and idk how to setup cloudflare tunnel😭
1
Creator
Apr 11, 2026add you domain I to your cloudflare account. by updating the name servers in the domain register to cloudflare. install the cloudflare tunnel app into your server/device (docker is fine), in zero trust/networks/connectors crate the tunnel, and then In the tunnel go to published application route and make the subdomian and point it at the service on your seever
orionseruppangolin
shreckislovebabyI got Twingate and I haven’t looked back it’s so good
1
Creator
Feb 3, 2026nice
Grumpy Bareafter the reg fee is there a monthly cost?
1
Creator
Jan 10, 2026Nope, not a single dime, 100% free.
1
chrishall8888reverse proxy
Silver😂😂😂
LemonTreeInsurerI just wish I could get web sockets working over Cloudflare tunnels.
lochy😁
TurtleThumperThank you so much!!!
_JDI love it!
maxngrok 💫
1
MrDerekibVPS + pangolin
3
Creator
Dec 18, 2025I'm very much becoming a fan of Pangolin.
2
Avatartwingate
1
Creator
Dec 18, 2025Twingate is an absolute solid choice.
Apple User692748412How do you deal with privacy concerns using cloudflare tunnel ?
1
Creator
Dec 13, 2025Haven't had an issue but I'm considering moving to #pangolin
1
OnyxI use a oracle cloud free tier server running tailscale and traefik reverse proxy
.Tailscale is GOATED
2
Creator
Dec 11, 2025Truth.
BlkInfoSecVery well explained. Thank you.
1
Creator
Dec 11, 2025Thanks!
1
Kindred Spiritim using tailscale, is great!
1
SamI love cloudflare tunnels, so good
HoldMyBeerAgainEhhh, I'll stick with with ddns updater on my router updating dns records in cloudflare if my dynamic ip ever changes (almost never), and forwarding only port 443 to a reverse proxy, also on my router, to then route to any service I want internally using just a cname to identify which service to route to: plex.mydomain.com, *arr.mydomain.com, immich.mydomain.com, and it has the added benefit of using letsencrypt to automatically retrieve and update ssl certificates on its own so I don't have the pesky this site might be unsafe stuff.
1
Booterbuy a vps and setup something like pangolin. don't use a 3rd party service. you have no idea what they are doing with your Internet traffic.
4
Xaal[sticker]
freezerrKHow about create vm for reverse proxy then open only ipv6 443 and 80 (if u need) then proxy it to ur internal services?
Rayyan⁸¹I did not know you could copy can paste multiple lines from one prompt you learn new things every day
Nurdismheadscale is an open source alternative to tailscale you can selfhost using docker.
maniak1342🥰
Jonathan Acuña - Doctor AILove this
1
Lucifurheadscale
iliasisn't there any risk in putting a service to the internet even with a cloudflare tunnel?
Stu Pittsyes. exposing any service or device to the internet poses a security risk. in this specific instance, most of the services you'd be hosting have their own implementation of authentication systems, which are largely untested. the services themselves will have unknown number of vulnerabilities ranging from RCE to bypassing authentication. unless you are constantly maintaining your services and updating them, your risk increases as time goes on. if you put it behind a VPN or tailscale, as I understand it, you're a bit more secure as you can tightly control who can access the services to begin with, and it takes the requirement for authentication security away from you to the VPN/tunnel provider.
3
iliasgood to know thank you
2
Lonusor maybe just actually make use of the IPv6 that your ISP gives you, no opening ports nor portforwarding at all, just add it proxied on cloudflare so IPv4s can resolve to it. 🤷🏻♂️
3
CojakSilverBackbuilt mine before cloudflare existed. doing afraid dns managing my dns as i dont have a static ip. with the agent on my my webserver vm to keep it updated and then iis reverse proxy to proxy to sub domain and other services on other systems on separate vlans
1
ShoukuIs it safe to?
1
Creator
Dec 10, 2025Yup
Armetronwhile this is great, I have had issues when doing any sort of large uploads or downloads. I run an immich server and I was doing a Google photos backup for my parents. The connection would terminate with the error being payload to large. It seems cloudflare does internal buffering of your request. The way I solved it was by using tailscale
1
Creator
Dec 9, 2025Cloudflare will only support 100meg per file transfer, I think they all have a similar limitation though, but not sure.
ElmerI used a tailscale funnel. It's been working great so far.
2
Creator
Dec 9, 2025Tailscale funnels are just as good, not sure you can set custom domains though, but could be wrong.
3
ElmerI don't think you can because they make one for you but that's actually why I chose to use it.
1
Yarka Hamar ༽ 🪳You can use custom domain , search on YouTube they have official Tailscale tutorial gor it (u have to use their MagicDns )
BestwelI love Cloudflared. Use it on four VMs. Makes running my company way better and safer.
15
Creator
Dec 9, 2025Same
boopbeepyes let's do the access controls video please! I want to access it, but I don't want other people to access it
1
Creator
Dec 9, 2025Done.
Bob 🇪🇺 💚For those who don't want to use cloudflare you can build something similar yourself with a cheap VPS: 1. wireguard tunnel outbound from your home lab to your VPS. 2. on your VPS a reverse proxy like nginx.
7
Creator
Dec 9, 2025Yup, vps will cost though, but still a good idea
4
Bob 🇪🇺 💚You're right it's not free. if you don't pay with money you pay with something else. and people who burn a ton of electricity with their home lab are usually able to afford a 3 buck VPS
3
KibbieKattYep I do this and it works great, $5/mo for the smallest vps that just runs a wireguard and haproxy container and now my homelab works as long as it can reach the Internet. Switching networks if I move or fail-over to cellular becomes no issue and takes 0 reconfiguration.
2
focus9000Why is this video not set to be downloaded?
1
Creator
Dec 9, 2025Not sure I didn't change settings or anything.
Robert Mitchellnow I've followed to instructions.. then what? 🙈🙈 how do I get to my music full stop ha ha. 🙃
1
Creator
Dec 9, 2025Go to the url? I'm confused..
Robert Mitchelldon't be confused.. you'll never be as confused as me 😂. ive made a tunnel, direct to my windows computer.. but sure really sure how I get access 😂 i even went to my new lovely domain, it comes up with an error. 🙈
1
RakalakarCan you show us how to do traefik with cloudflare. It’s something a lot of people struggle with.
RakalakarYou just showed us a key! Now anyone can make a tunnel for your domain! Rotate it!
Lexianyone wanting to do this as cheap as possible, .xyz domains that are 6-9 numbers (e.g. 836194.xyz) are $.99 a year!
Blasthey, I have a 5g router, so no port forwarding and no IP address static, would you recommend using cloud flares tunnels for my Minecraft server ? I tried ngrok but it was very expensive
1
Creator
Dec 9, 2025I can't see why it won't work, the router and connection type aren't going to effect it, and if all you need is to expose an ip and port then yeah, go for it.
2
Robert MitchellI'll soon be able to tell you 😂 just bought a domain 🙈
1
SlushyPieKeep in mind you NEED to add the mod called “modflared” to get cloudflare to tunnel your server.
1
BlastI don't know, my router block everything with a CGnat, and I cannot get in by anything through port or ip4, even ipv6 are invisible .
1
GabrielI use playit.gg for my servers. I self host an AMP server on my Linux box and use playit for the proxy...its just simple and works. doesn't need port forwarding or anything. its free too, and for MC servers with my friends its more than fine.
2
Gabrielno need to have a domain either, it randomly assigns one in their network. I only use playit for game servers though, since the ip can be whatever.for other services like websites I have cloudflare tunnels and zero trust set up
1
Blastdo you need to give them a different IP every few hours or is it fixed ?
1
Gabrielno its fixed. I have a cobblemon server that I've been running for over a month and it hasn't changed. the free tier is 3 free tunnels I think, and they're random names like twitch clips...think banana-animal.ty.etc and that is what they join the server with. the underlying ip behind that likely shifts over time but the "domain" it generates stays there for you to use. like I said, perfect for throwaway Mc servers where the IP doesn't really matter that much. I pay $3 a month for the premium cause its been such a good value, but that's me
1
jorraywitis there any alternative to cloudflare tunnels for streaming since it is against TOS?
2
Creator
Dec 9, 2025Tailscale maybe...
4
Noobztailscale is an option but would require the end device to also have a client installed on it. great if your only accessing Plex/jellyfin on a phone or computer remotely but wouldn't work if you want to pull it up on an Xbox/smart TV/etc.
Noobzyou can still purchase a domain (I'd also recommend cloudflare for this) and set up a DDNS client on your local network to update the DNS entries when your external IP changes. then use an nginx server to forward traffic to your media server. you will have to expose port 443 to the nginx server so be aware of that, but the traffic will at least be encrypted so not as safe as a cloudflare tunnel but still relatively minimal risk.
1
Creator
Dec 9, 2025True
Bryson FrucheyTailscale Funnel works and does not require the client to have anything installed. It will give you a domain name that you are unable to edit(to my knowledge). I put that in the remote access urls section of plex to access plex from anywhere using app.plex.tv.
1
user9485496336213Rent a VPS for $5/month. Tunnel to your home server using rathole. I’m a maintainer of rathole.
Creator
Dec 9, 2025True, I should do a video on using T's funnels
WyattI use tailscale and my friends use an Apple tv as it can use vpn’s to use my Emby on my server.
xkeegzzzreverse proxy like traefik or nginx
1
user9485496336213Serving video is against cloudflare tunnel TOS. But they don’t seem to enforce it unless you are a heavy user.
50
Creator
Dec 9, 2025Yeah, I stream my plex often and haven't ever had an issue.
19
UnabnormalDayIt’s probably a rule to prevent commercial startups lol
2
Creator
Dec 9, 2025Likely
certifiedsimpdo you think they will be okay with stremio + real debrid
1
RI have my sever set up to mount my real debrid torrents using rclone and decypharr. It works fine. My only problem with stremio was being unable to share my shows without setting up stremio for someone else.
1
Creator
Dec 10, 2025You should be OK, as long as it's not streaming for days and days to the whole family, you should be fine
certifiedsimpI use aiostream, media-proxy and warp to bypass the IP restrictions
1
xkeegzzzI got done using a cloudflare tunnel streaming plex remotely. so I started using traefik reverse proxy.
1
user9485496336213In what world is a reverse proxy a substitute for a tunnel???
1
xkeegzzzit exposes your services securely
1
user9485496336213That’s not what a tunnel does 😂
1
xkeegzzzinteresting, coz thats exactly what it did for me
1
user9485496336213Sigh. You enabled an optional feature.
xkeegzzzwtf are you on about
I don't know man...the best thing to expose is a simple vpn like wiergurd almost perfect safty(as long as private keys are safe) and full accessibility +you can config your wiergurd client to only forward your subnet so you can enable vpn all the time without slowing normal apps on internet
4
Creator
Dec 9, 2025True, harder to share with the family or friends though, but another great option.
2
Tonyyeah, if you can set it up for them it can be as simple as connecting tho…
1
usersxnnvrjv27If I recall correctly tunneling is only available if you buy the domain through them. Double check if you decide to use tunnels.
3
Creator
Dec 9, 2025Nope :) not at all! As long as cloudflare is managing your DNS (free) then you can use it for a tunnel.
8
usersxnnvrjv27I think I remember now. Can you manage dns without buying the domain through them? I remember dodging some roadblock by buying the domain via CF
1
Creator
Dec 9, 2025You don't need to buy with them cf, but it just needs to be managing the dns.
SiI’m a newb with this, would this replace the likes of Caddy and Nginx? Because I’ve had nothing but issues with them on my Rpi5
2
Creator
Dec 9, 2025Yes, no need for them at all. This does the job fine.
SeeeeeeeebI’ve been trying to not do any cloud stuff and move everything locally, is there an option to have this local and not through a cloud provider? Things can change and cloudflare can decide to start charging
1
Creator
Dec 9, 2025You can but you need to manage port forwarding, dns and a nginx proxy server.
2
willim on cgnat and i dont like using third partys to route my data so i use a wireguard vpn to create a tunnel like cloudflare to a VPS where i can then port forward, but it wont ever be like cloudflare because of their ddos protections etc, how can i make my homelab secure without relying on cloudflare or someone else to manage my ports
1
Robert Mitchelloh here was me thinking this eas going to be hard! I'll get this done this week and see how it goes. thank you 🤟
Second-by-Second Performance
Total viewers and likes aligned with spoken words.