upvote
Yup, I have a similar setup where I use a Wireguard VPN to tunnel traffic to a tiny public facing Caddy server, which proxies the traffic to the server under my own roof. No Cloudflare!
reply
> Cloudflare tunnels for free. I could replace that with port forwarding

You could replace it with something better, like pangolin, either their cloud or even self host it too, and that way you can tunnel to other stuff like if you have a media server where you can watch your movies from anywhere in the world.

reply
Yeah I find it a bit funny when people self host to get away from cloud and then use Cloudflare tunnels.
reply
CF tunnels will ban your account if you used it to watch a movie due to DMCA/copyrights.
reply
Is this really true? "A friend of mine" has been running a Jellyfin server behind Cloudflare tunnels for years and hasn't had any issue.
reply
Not sure if it is still like this, but jellyfin used to leak massive amounts of metadata. For example by checking the thumbnail paths (which were unauthenticated) you could see what shows/movies someone had.

Might want to warn the "friend" if they don't have auth on the tunnel itself.

reply
I would guess they only take action when they get a DMCA complaint and that wouldn't happen if you only share privately with friends.
reply
They can also take action if they decide you're wasting their bandwidth or (especially) cache space. It's not allowed to host video files on any free cloudflare plan due to cache space.
reply
I have something similar. I use Cloudflare tunnels too but also their CDN which is free (for now).

That's the only thing I haven't really been able to figure out how to do on my own. Back in the day, hosting a static site from my crappy DSL connection was basically no problem and most people who were accessing my site were probably in my timezone. Now with how big the web is and how many bots there are, I worry about the quality of self hosting without a CDN.

reply
Bots are over-fearmongered. Yes, you get a lot of bot traffic to any website. No, it isn't a ddos unless you make it a ddos by making your server do 10 seconds of computation on every page load. Just keep an eye on server load so you know when a solution is actually needed, and you'll be fine. Install Anubis if you want to, but there are even simpler checks, like requiring an image or CSS file to be loaded or setting a cookie or putting a simple redirect in JavaScript or meta-refresh.
reply
Cloudflare tunnels are pretty cool. Do you segregate your server from your home domain too? Little weird having cloudflared on my home network. It make things a little more annoying but I haven’t bothered to fix it since I dev on the same production server.
reply
My server is a different computer which only does this. It's not on my personal computer.
reply
same here, except a 5 yrs old raspberry pi hanging off a power adapter on the floor.
reply