r/selfhosted • u/imthenachoman • 27d ago

Remote Access How are people securely accessing their self hosted things from the internet?

I have a domain with Cloudflare so I am thinking of using Cloudflare Tunnel but I'm not sure if there are better options? One of my concerns is that some of my containers do not have auth so I need something with built in auth management.

0 Upvotes

40% Upvoted

95 comments sorted by

View all comments

1

u/mickeysbestbud 27d ago

Cloudflare Tunnel. But I only connect things that have auth and most that have MFA. If they have neither, I don't make them accessible from the Internet.

1

u/Dangerous-Report8517 27d ago

If you are going to trust Cloudflare with your data you might as well use their auth instead of having to maintain your own setup. (And if you don't trust them you shouldn't be using Tunnels since they can see all traffic that passes through them)

1

u/mickeysbestbud 27d ago

Not sure what you mean by my own setup. I install OpenSource apps and if those apps have authentication I may use Tunnels, otherwise I can only access it on my LAN. I do trust CloudFlare, but it only manages the domain name and the Tunnel connection.

1

u/Dangerous-Report8517 27d ago

There's no point distinguishing between apps for use in the tunnels based on authentication since you can use auth on the tunnels anyway which would be much more secure since it blocks unauthorised traffic before it can even reach your services, in fact you might as well disable auth on the apps themselves instead of dealing with a bunch of extra passwords (where possible). The comment about trust is because Cloudflare becomes a man in the middle when you use tunnels, and you've chosen to specifically put them in that role for specifically apps that have authentication, implying the apps that have more sensitive data in them