Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
view the rest of the comments
You can use Service Tokens with Cloudflare Zero Trust (Access). Unfortunately, the companion App then has to support setting custom request headers, in order to send the token. Not many support this in my experience.
The only other option would be to use Basic Authentication, instead of Cloudflare Access. This isn't as secure, but would be supported by most Apps (since you can simply inline user:password in the API URL). You can even setup a Cloudflare Worker to add basic auth to any Route you want.
Ideally, would love some hybrid of these approaches, where I can keep Access enabled, but override with basic auth for 'legacy' apps. Don't know of a way to do this though.
Edit: Forgot to mention a third option, if you just want access while home, you can setup a bypass in Cloudflare Access policies for your home IP address. Then if you really need access when remote, you could also use VPN, but not as seamless of course.
You're right about the spotty support for Service Tokens, so far i could only find a planned inclusion in paperless, and ~~maybe a cludge for homeassistant?~~ a PR in Home Assistant Companion.
I've found a Reddit post recommending the usage of mTLS cert rules, but looking into that I just feel overwhelmed.
I've looked at mTLS certs as well, but think you'd run into the same issue there as Service Tokens (app needs to support it).
It really is a shame, because Cloudflare Tunnels / Access is great otherwise. Just troublesome to have non-browser access.
homeassistant community store has a cloudflared add-on that works great to get it to easily work over cloudflare tunnels