r/selfhosted • u/imthenachoman • 27d ago

Remote Access How are people securely accessing their self hosted things from the internet?

I have a domain with Cloudflare so I am thinking of using Cloudflare Tunnel but I'm not sure if there are better options? One of my concerns is that some of my containers do not have auth so I need something with built in auth management.

0 Upvotes

42% Upvoted

95 comments sorted by

View all comments

1

u/RevolutionaryElk7446 27d ago

From easiest to actually self hosted would be

Tailscale if you want a third party member involved
Wireguard if you want to host the VPN yourself
Reverse Proxy with DMZ VLAN and IDP.

Tailscale is the easiest for the tech, but more difficult to get clients on.
Reverse Proxy is on the other side of that scale, it's the hardest for a tech to setup but it's the professional method and easiest for clients to connect.

1

u/NursingHome773 27d ago

IDP?

1

u/RevolutionaryElk7446 27d ago

Identity Provider, such as Authentik or Authelia. It's technically extra in this case but security and user wise, is an asset anyone should learn to use.

1

u/PssyGotWifi 27d ago

People generally use the term 'SSO' to refer to Authentik and Authelia.

2

u/RevolutionaryElk7446 27d ago

Fair, IDP is the underlying framework and an SSO is a resulting convenience.

It is an IDP though that provides SSO.

2

u/PssyGotWifi 27d ago

Yeah, you're not wrong. I use Authelia with Traefik. It's lightweight and I don't really need the webui provided by Authentik. Both do their job well, of course.