So I decided to pay more attention to the security of the services I expose from my home lab. I’ve learned quite a bit about Cloudflare tunnels in the past 24 hours and have just about everything proxied. Exciting times! Its handy to be able to just type in a domain and no ports. Props to Cloudflare for their free plan. If you’ve never played around with Cloudflare, I’d highly encourage it. The Zero Trust portion also has a free version, so you can tunnel to your heart’s content. Also, it makes life much simpler since so many web apps are quite happy to work with Cloudflare via API. I’ve also deployed Cloudron as a web app container on the internal network, and Apache Guacamole for quick SSH access to all the various VMs I have deployed in the home network and cloud. Twingate is sitting on the back burner, but I’m contemplating if I need that, or if I should just deploy Uptime Kuma in the home network and tunnel it out. Makes life so much simpler.

I also deployed a TOR relay (in the cloud) and its interesting to see how its evolved over the past few weeks it’s been running. I’ve given it access to a fair amount of resources, so it’ll be interesting to see how much its used. So far I’m just a middle relay, nothing super exciting.