this post was submitted on 18 Nov 2023
1 points (100.0% liked)

Self-Hosted Main

504 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
[email protected]
1
Benefits of Cloudflare Access (alien.top)
submitted 11 months ago by [email protected] to c/[email protected]
26 comments fedilink hide all child comments
 

For a self-hosted application with a valid SSL certificate and support for OAuth, what are the benefits that Cloudflare Access provides? From what I can tell, it also filters traffic to possibly block attacks? Can it even be used with a self-hosted app if you aren't also running Cloudflare Tunnel? Is there a better alternative (that also integrates with major OAuth providers like Google, Github, etc) for self-hosters? Thanks for the help in understanding how this works.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 11 months ago (2 children)

There’s not much reasons of exposing any of your local services to internet. Use vpn to have access to your local resources. This is best you can come up with for your home lab

[–] [email protected] 1 points 11 months ago

For most things I agree but I this case I'm thinking of a service where you want to have a group of people access and they all aren't willing or tech-saavy enough to install a VPN

[–] [email protected] 1 points 11 months ago (2 children)

Question : what if I need to access my home computer from a work laptop and I’m not allowed to install things such as the WireGuard VPN client. Do I use native say Windows VPN?

[–] [email protected] 1 points 11 months ago

Never perform personal tasks on work equipment. If it's not something you'd expose to the open net, you definitely shouldn't be accessing it from equipment you don't own.

Get a personal laptop for remote tasks, or use your phone.

[–] [email protected] 1 points 11 months ago (1 children)

Assuming it's a Linux server at home and you can use SSH on your work computer, there's a couple ways to do this.

  • Install a web based terminal client
  • Setup Cloudflare tunnels on your home server and use the the SSH proxy. I do this with a simple helper in ~/.ssh/config:
Match host "*.cf"
  ProxyCommand /usr/local/bin/cloudflared access ssh --hostname $(echo %h | sed 's/\.cf$/.homelab.nz/')
  ForwardAgent yes
[–] [email protected] 1 points 11 months ago

Wait don’t you need the Cloudflare agent to be able to connect to a tunnel that’s set up?