Cloudflare Tunnels: Getting Started with Domains, DNS, and Tunnels

[@DBTechYT]

Here is a docker-compose with a restart policy to help making deploying a CloudFlare tunnel a little more straightforward: dbt3ch.com/books/access-your-self-hosted-services-without-port-forwarding/page/cloudflare-tunnels-docker-compose Thanks to The Blue Portal for sharing this with the community.

[@flynhyer4445]

thank u very much. hopefully today ill get it goin.

[@Baku-oc5fc]

Thanks!

[@enesbala5195]

Thank you!

[@NickTheCodeMechanic]

Thanks for the video. I'm currently in the middle of it, but I'm don't really understand where we got the `root@196....` when performing ssh. Also, pinging my new domain says it doesn't exist.... but Cloudflare says I"m all good. Confused, please help.

[@DBTechYT]

@@NickTheCodeMechanic regarding the "root@192" stuff... "root" is the username of the device you're logging into. Your username might be different. The "192.168.0.x" is the IP of the device you're logging into. As far as the ping issue, it's likely a DNS issue. This is common. Try connecting to the internet via a VPN and then pinging your domain. It should return a CloudFlare IP address if things are working correctly.

[@brandonchappell1535]

omg, this is the first guide ive seen that doesnt involve creating dockers or other crap, its just simply, explained step by step, like a normal human being !! There is such a need for this, in this area, as not everyone is in front of a PC 12hrs a day!! Couldnt hit Sub quick enough

[@sina23sina]

Finally someone made a video with proper pace and no additional comment. Thanks very much! Very precise and on point.

[@JamieLloyd]

You sir, saved my sanity!!! No more NPM for this dude, Cloudflare tunnel all the way! Thanks for all the effort put into making this video and helping us out.

[@dvrtimemachine]

I've watched countless videos on using cloudflare specifically, this was the most straight to the point and easy to understand video. I can't say thank you enough!!

[@DBTechYT]

really glad the video was helpful. I'd made it before, but really wanted to create something more streamlined :)

[@R1D9M8B4]

This was a thing that took me 5 days to figure out. A lot to learn. Of all my youtubers on this subject... you are the most reliable. Thank you.

[@DBTechYT]

Wow, thanks! Really appreciate your support :)

[@GoibniuNihiliste]

I don't know how, but I got this working on a CGNAT. You are the greatest man to ever live.

[@DBTechYT]

That's awesome!

[@10a3asd]

This is gold man. I've been leaning towards this solution and slowly learned the bits and pieces as time goes on. Thanks so much for laying all this out. Incredibly valuable!

[@DBTechYT]

Glad it helped!

[@zeemssy]

This is golden. Have been searching for this solution for weeks now. Thanks for this video ☺️

[@sreenathramanna8881]

One more top quality session from Dave! As a side note, most of the technical videos, I usually watch it 1.2x speed. Can't do it at Dave's speed of speech! 😆

[@SK-qu4wo]

I don't get it. He speaks fast so why would you speed up the video?

[@mukeshpuppala714]

I am a noob when it comes to networking.. I was able to understand and follow each and every step ❤️. Now I am accessing my jellyfin server over the domain ❤ Thank you so much .. just subscribed

[@The_Blue_Portal]

You can also turn the docker file into a stack in portainer like this: version: "3.9" services: tunnel: container_name: cloudflared-tunnel image: cloudflare/cloudflared restart: unless-stopped command: tunnel run environment: - TUNNEL_TOKEN=YOURTOKENHERE You can also add this on to other stacks if you wanted to make a tunnel for each application

[@DBTechYT]

Great info!

[@DBTechYT]

Replying again to let you know I've created a page on my wiki that has this info as well: dbt3ch.com/books/access-your-self-hosted-services-without-port-forwarding/page/cloudflare-tunnels-docker-compose

[@The_Blue_Portal]

​@@DBTechYT Wow that's super dope!! Thanks for all the shoutouts!

[@DBTechYT]

Thanks for sharing!! The least I can do is credit the source of the awesomeness!!

[@nunoganho]

Perfect. Just what i was looking for. Worked fine

[@nimshuda]

Thank you for your excellent video on Cloudflare Tunnel installation! Your clear instructions saved me hours of frustration, and I quickly achieved success. Your expertise is greatly appreciated!

[@jeffherdz]

OMG !! You have saved me 100 hours of time and just maybe a few brain cells. Thank you !

[@DBTechYT]

Excellent!

[@johnmroz315]

NPM is being retired and I have closed off the ports that I used to have open on my Firewall. I did have to do something differently though. I use a cloud service and have a Tunnel setup for it. I wanted to restrict it using the IP Address and Bypass method you showed but that would not work. I could net get through. I changed it to Service Auth and it works. I can reach from my home IP but not when I fire up a VPN and my address changes. This is a great solution and no more worrying about Ports, Certs, and NPM.

[@ScofieldMuliru]

Thank you so much for making this video. This is very informative and more so with the current environment where some ISPs restrict port opening from their end.

[@ali2kan]

All great recommendations as usual DB! Porkbun is by far the best for price and privacy (and ease of use). Cloudflare is incredible! I’d say they are sooo instrumental to daily operation, that I wonder what would happen if there was a significant outage. This all makes me think if I should think of some sort of ‘Plan B’ - if things go down, or receive maintenance. But if CloudFlare goes down - that everything might be as well... which is definitely a scary thought!

[@DBTechYT]

I've been considering a plan b as well. Trying to figure out the best plan for me. Might make a video about it when I have something figured out

[@DavidPeele]

This was great!! Thanks. I never knew about Cloudflare tunnels and have only used DNS forwarding with open ports. Now I can close all those open ports on my router. And can have secure passwords for all my docker web interfaces maintained by keychain. Awesome.

[@DBTechYT]

That's awesome! I'm glad that my video helped you learn something new. Did you see my video about adding additional authentication for even more security? kzbin.info/www/bejne/rZXQk3SlZZeeqrM

[@darrenoshaughnessy3921]

Followed another VERY well known tech blogger/tuber and got myself into deep poop (beware of stuff from the legacy Argo Tunnels days). This tutorial - and the others regarding remote/restricted access - saved the day. Clear, concise(ish), occasionally tangental (like my brain), and, if I'm sufficiently caffeinated, I can watch them at full speed! ;-) Thanks, David.

[@DBTechYT]

Glad the video was helpful!!

[@Deanwhu7]

Thanks so much! Was tearing my hair out trying to work this out. The closing the cmd and not editing the -d in I think was the problem

[@AndyCastillo]

Your video was very helpful. I was able to run Foundry VTT on my windows desktop and I'm grateful for your instruction. I've been trying to do this for over a year. Thanks!

[@RadTechDad]

So, you've mentioned in other videos that you host Emby. Do you have that public-facing? If so, how do you get around the Cloudflare restriction on streaming? Do you run some other kind of proxy just for Emby?

[@EngineerK]

Same question here

[@TheManuforest]

This is the video I was waiting for. Thanks mate ! I love Cloudflare ,... Cheers :)

[@DBTechYT]

Glad you found it helpful! 3rd party identity provider integration video coming tomorrow

[@janezhitori6203]

You trully are an network angel 😁😁. After all the port forwarding pain and you mentioned you dont do that anymore, this saved me! Thanks a lot for all your videos. You sir got new subscriber with the bell on 😊

[@jaymax97]

Holy cow man this is the video I needed! Never could understand nginX proxy manager. This seems way easier to me. Thank you for showing this alternative method.

[@DBTechYT]

Glad it was helpful!

[@Shubham_Gupta_ji]

Very helpful video sir 👍. Please make a video on how to set up ftp server using cloudflared tunnelling ..

[@DBTechYT]

I'll see what I can do :)

[@rickdjkane9370]

Great informative video. I am a beginner to self hosting, your videos help me a lot. Thanks again.

[@DBTechYT]

Glad to help!

[@SalvatoreBorgia-e8g]

As a newbie I say: AWESOME! finally after hours of research... thanks man

[@DBTechYT]

Glad I could help!

[@oversight33]

Thanks for the great video and for taking time to help me out with my SSH Question!

[@pixelfound]

Thank you so much! I was following casaos setup for raspberry pi from you to access containers from the internet, after this no more NPMs! :D

[@hackhitt]

Thank you very much for your video, I had been looking for good information for a long time and you gave it to me. Subscribed and grateful, greetings from Venezuela.

[@TheMichael2019]

Thank you so much for this vid as it helped me protect a service on my home server that didnt have a log in.

[@Gina-t9y]

Thank you for the useful and free information. I have a question: I need to do a tunnel on my Mac High Sierra but cannot use Docker. Do you have any suggestions for other free tools I could use? Thank you in advance.

[@davsyl94]

Awesome video! I have learned so much from you over the years...

[@chadmarkley]

Start to finish video was SOOOOO smart. Well done sir

[@DBTechYT]

Thank you kindly! I really felt like I needed to make this one :)

[@andrewpndavies]

Superb video - (and hope you're feeling better?). Two questions though : 1 - I'd like to set it so that users outside of our LAN have to enter their email to get a PIN, but when they are on our LAN, they don't. We don't have a static IP though. Do you know if there is a way of telling Cloudflare to always allow access from inside our LAN? 2 - What's the best way of running the Tunnel service on a Raspberry Pi? The docker command in the video doesn't have an ARM image. Thanks so much and stay well! Andrew

[@DBTechYT]

This should help with you first question: kzbin.info/www/bejne/bGaplXuIqJWUrqc I've heard people use the same process with Pi devices, but haven't tried it myself

[@TroubleChute]

I always stayed away from this as I thought "up to 50 users" meant only 50 people using the website should I day host a website or page with this... But I assume this is comparable to port forwarding in some ways? Is there any reason to not ditch nginx from forwarding traffic to docker containers, and instead access them "directly" with this?

[@DBTechYT]

Hey! Thanks for watching! I use Tunnels and get thousands of visitors to my online assets without issue. Using Tunnels actually removes the need to port forward at all, which, in theory, improves network security. I no longer use any sort of reverse proxy to access my self-hosted applications and rely on this solution exclusively

[@dragon3602010]

Awesome thanks and how can we not expose ports of the containers on VPS if we want to use the tunnel?

[@DBTechYT]

Containers run on ports. You could use Firewalls to block access to the containers to everything but your IP address to help prevent others from accessing your containers on the IP:Port and then use Tunnels to access them via domain names.

[@50_Pence]

Your videos are really great. I'm going back watching the ones now. Help so much! Thanks

[@golvellius6855]

Dude, thank you so much for helping me understand all this jumbo mumbo bro fr❤❤❤thank you!

[@DBTechYT]

Happy to help!

[@golvellius6855]

@DBTechYT I hope you feeling better we been praying for you

[@RiffyDevine]

Just saying I found your video well googling around and I got it working with ease thanks to it. So, thank you for doing it. Going to go watch the securing CF next.

[@DBTechYT]

Awesome, thank you!

[@HighVoltageBrewery]

Thank you, this was exactly what I needed to day. Now I have a WebODM page up and running with email verification

[@DBTechYT]

Awesome!

[@mauriciob3334]

I was setting up the same thing to my proxmox installation, got ready the home assistant and some other services. I knew about this method at work, but they used Google Workspace account to log in, thanks for the video.

[@DBTechYT]

Thanks for watching! I hope the video was helpful

[@MichaelCarreras]

Damn DB, I love all your stuff, and you have helped me so much over the years. I was going to do this, but there is an upload limit of 100mb for free plans. might be a good idea to let people know that these free accounts are limited. Now if that only applies to cloudflare hosting, then I will stand corrected, but it appears to be managment for the entire site which is not cool, at least for what I am trying to do. Just thought I would remind you, while I luv ya, to remember to point out limitations before people start changing thier registrar information!

[@Sapious1]

Good point. I was implementing this and then thought maybe when this video was done there was no limit. For now I'll stick with NGINX and a Docker container to update my IP.

[@MichaelCarreras]

@@Sapious1 I just ended up purchasing a domain through cloudflare. It was more than fair on price and if I'm not mistaken, it provided a cost effective work around on the restriction yet still allowing me the ability to set up the home server via tunnel. I paid it up for like 5 years, and ultimately plan on migrating to web3 domains in the long run anyway. So far it has worked great, gaggle of musicians exchanging large multitrack files on my private server was the goal, and I can say mission successful. I am no pro like DB, and can not express enough how much I respect the guy for the time he gives to us, I'm just a guy determined to get what I need done. Thanks for the comment, and hope that helps!!

[@vaddimka]

Great video, but I think it's missing an explanation that the CloudFlare connector container lives in our network, establishes a connection to CloudFlare and uses that connection to reverse-proxy the traffic from outside to the services inside of our network. I mean, of course it's obvious, but for some reason I had to pause and think about it before I could understand what the next steps with penvin do.

[@korostech254]

Your content is 💯🥶 new subscriber from kenya continue with good work

[@JuampyRabino]

Super clear! I'm gonna try this and see how it goes. Thank you so much for this

[@DBTechYT]

You're so welcome!

[@camlcase]

Awesome guide! ⭐ Question: Are there any performance differences depending on how you host your Cloudflare Tunnel on your local network? Like installing the tunnel on your machine or when hosting it with Docker?

[@patrickhult]

Hi there great job you are doing. I do think that you should do a comprihemsive video series about Cloudflare Zero Trust several catagories: Analytics, Acces, Gateway, Teams, Logs and Settings. I really think this could render a lot of views. Cheers

[@maikelboom5764]

Amazing, thank you for the master class , i learn a lot of new cool things with your videos. Merry Christmas btw. :)

[@DBTechYT]

Thank you so much! Merry Christmas 🎄⛄

[@itacirgabral8586]

the porkbun nameserver subdomains curitiba, fortaleza, maceio and salvador are cities in the northeast of Brazil

[@ViszlaBoss]

Absoultly fantastic walk through thank you. Setup perfctly now. Thank you. Is there a limit to how many "Public Hostnames" you can have in a single tunnel?

[@DBTechYT]

I'm glad the video was helpful! I haven't run into any limits on hostnames :)

[@ViszlaBoss]

@@DBTechYT well you got a sub from me. Thanks again.

[@sharvinzlife]

Never known you can run multiple apps on a single cloudflared tunnel! Love it 😍❤️ Thanks always your comprehensive & wonderful tutorials. Could you please tell me how do you update the cloudflared tunnel, I see on my dashboard there is an update avialable but I cannot connect my tunnel through shell on Portainer? Thanks in advance.

[@TheInfamousToTo]

Hey Dave, great video as always. im lucky to find your youtube channel somehow , keep up the good wok

[@DBTechYT]

Hey, thanks!

[@tokoshiro5]

great video, all I needed !

[@craigooonw]

Dave this is brilliant cheers! ill be setting mine up over christmas. what about an updated nextcloud video including these options to get it up and running? , again cheers! :)

[@DBTechYT]

I guess I've underestimated how many people use NextCloud. I've never found a good use for it. But I made this video a while back: kzbin.info/www/bejne/pmGsaaOfoNJlhpY

[@mikeburke7028]

Thanks for this as I've always shied away from opening ports on my home network

[@DBTechYT]

Glad to help

[@OgllyBoogly]

After wasting a ton of time with haproxy, and always having suboptimal results, this is amazing. I wish there was a way to automatically enable HTTPS on tunnels but overall great video!

[@DBTechYT]

It automatically enables SSLs on your domains.

[@OgllyBoogly]

@@DBTechYT Wow I did this at 2am and did not notice. I assumed it would not perform SSL offloading like HAproxy. This is even better!

[@NEoXeditor]

14:14 I would also add "-d --restart=always" here If the server is restarted or in the event of a power failure when you turn on the server, cloudflare tunnels will simply not work because docker has not started. --restart=always will automatically start docker (Please correct me if I'm wrong.)

[@javiesteban4510]

Perfect video!!!! BEST vídeo to Learn install and configure cloudflare

[@DBTechYT]

Glad you liked it!

[@cba8228]

Thank you for your brilliant explanation 👏.

[@robertoaureli2813]

Hello, I'm a newbie in the industry, to set up DNS I have to have a tunnel configured, because I'm watching videos but they only explain how to set it up without saying the requirements, thanks and have a nice day.

[@seekerdroid]

Awesome stuff. My ISP doesn't provide a static IP. I can now host applications and save bucks on cloud platforms.

[@yomajo]

Newb on devops. Where are applications coming from in this video? How would setup be different for application running on docker compose inside VPS?

[@DecouvrirLaTechnologie]

Thx for this video. I needed to set that up for more security

[@edgardoirizarry9997]

Yes yes yes! That’s what I needed min 18. I don’t know why I never click on that top button smh 😂 you are the man. Thank you for such a great video. Must appreciate it!

[@DBTechYT]

YAY!! I'm glad this helped!! I've got another video coming that will show how to integrate 3rd party authentication like Google and Github :)

[@edgardoirizarry9997]

@@DBTechYT looking forward to see it. Now on my way to change some settings on my server and update my tunnel. 🍻

[@DBTechYT]

@@edgardoirizarry9997 YAY!!

[@graham-moss]

Great video. I will definitely look into Tunnels for my applications.

[@thomas3872]

Just what I was looking for. Thanks man!

[@DBTechYT]

Awesome! Really glad the video was helpful!! I've got another video coming that will expand on this to use 3rd party authentication like Google and Github :)

[@Baku-oc5fc]

David, I'm receiving a "yaml: line 5: mapping values are not allowed in this context" exception to the docker-compose example you provide. Here's a copy of what I did: version: "3.9" services: tunnel: container_name: cloudflare-tunnel image: cloudflare/cloudflared:latest restart: unless-stopped command: tunnel run environment: - TUNNEL_TOEKN=I inserted my cloudflare tunnel token here. Thanks for your help.

[@BinaryHackerMan]

DNS propagation isn’t controlled by any one company, depending on routes and caches it CAN take 24-48 hours but usually, especially with cloudflare, only takes a few minutes.

[@DBTechYT]

Agreed but I've had companies wait literal days before making the change for the propagation process to even start

[@keerapatratanasirisawad4040]

Thumbs up! I think this way easier than other method I found. By the way, is there anyway to prevent google from indexing these pages? I am using my current website for SEO as well.

[@adifoto6362]

Thanks for the video for another informative and easy to fallow video.

[@evanbaker6375]

Not sure if I missed in your video, but how can you have specific vm's from proxmox accessible directly on the tunnel? I have a linux container, vm and a windows vm created, but I can't seem to get them accessible across the cloudflare tunnel. I'm sure it's something I'm overlooking but would love any suggestions Great videos by the way. I love how detailed your videos are!

[@DBTechYT]

If you're trying to do remote desktop stuff, I would look at my video about Guacamole: kzbin.info/www/bejne/qpiUdJWDet92qcU

[@Sometechyguy]

David - Another great video. I just have a minor hiccup, the tunnel is functioning properly when away from the home network or even over tailscale. When I connect locally, it cannot find the server. Any ideas? the only thing I can think of is there is something with cloudflare not liking my *.5.0/24 network compared to the *.0.0/24 network you use in the video. Any ideas oh great bearded wonder? Edit - figured it out - DNSSec needed to be set the same for both cloudflare and porkbun. Thank you again for the inspiration to tinker.

[@ghjkqwer9777]

Good. Thanks for the instructions. Make please one more instructions for RDP connection as well.

[@DBTechYT]

You haven't even subscribed to my channel. How would you know if I made a video about it?

[@ghjkqwer9777]

@@DBTechYT I would count on your answer under this comment) But I've subscribed for the future greate videos)

[@lionelmasoane391]

thank you so much this has been really informative. I would like to ask cause I see in most videos the tunnel is setup only for application or web, but what if you want to add servers to the tunnel, in my case to Azure Vm. Is this possible or been done?

[@ntn888]

+1 for cloud flare tutorials. i've been digging at it but never get past learning. all i hear workers and stuff to implement; especially for the backblaze b2 free traffic... BTW could you do a straight forward video on how to setup backblaze with cloudflare for free ingress, i think it's a common usecase! thanks!!

[@DBTechYT]

I'll take a look :)

[@SK-qu4wo]

Thanks to you I was able to get my Cloudflare tunnel set up with Jellyfin. I would like to know though if either Porkbun or Cloudflare would suspend my domain for using the service for something like Jellyfin.

[@DBTechYT]

This has been brought up multiple times in the comments of this video: They prohibit what you're talking about doing. You can read their TOS and, more specifically section 2.8 here: www.cloudflare.com/terms/ This may result in your CloudFlare account being terminated

[@SK-qu4wo]

Is there a workaround to prevent this from happening?

[@DBTechYT]

Don't use CloudFlare. You could use a self-hosted VPN or a SDLAN option like TailScale or ZeroTier

[@SK-qu4wo]

@@DBTechYT I get very high latency with Tailscale and slow upload speeds which leads to non-stop video buffering. I don't have this problem when I use the Cloudflare Tunnel option demonstrated in this video.

[@ZilchBloke]

Loads of thanks to you Dave. I have learned so much from your videos. One quick question. Do you know a way to configure CNAME in cloudflare to point towards azure storage blob to host a static website. I have spent hours and days to get it working :(

[@DBTechYT]

You'll just log into your main Cloudflare account. Open the domain you want to use. On the left menu of the domain overview page, you'll see a tab called "DNS". Click that and then you can click the "Add record" button to create a CNAME. Just make sure that the CNAME you want to create doesn't conflict with any of your zero trust domains.

[@teckho316]

Very good instructional video on how to use the tunnel, love it! One quick question, if we use tunnel for let say Pingvin or Nextcloud, is it ok to upload or download large files eg. ~ 60GB? My concern is there is no clear written rule regarding the bandwidth we can use thru the tunnel. Perhaps I overlook it or my concerns isn't a big deal?

[@DBTechYT]

I know that they have a TOS rule about media servers/streaming, but I'm not sure what they would do with file transfers like that as their language is (seemingly intentionally) vague. Read section 2.8 of their terms here: www.cloudflare.com/terms/

[@tokoshiro5]

is porkbun brazilian? these are all state capitals (manaus, curitiba, fortaleza, etc) (btw thks for the channel)

[@SmeetsDieter]

Great tutorial! Can you also create a public hostname you can use for webdav, VPN, etc...(Cannot get that working)? Thanks!

[@seanwalford494]

I know it's a year on, but followed this and all working nicely. Only caveat is I've tried to setup for just specific IP access, it's still bringing up a page requesting an email address?

[@Marc42]

Thanks for this! Extremely valuable. Shouldn't the token string be blurred out as well though?

[@DBTechYT]

Meh. I guess so if I was going to keep the tunnel active after creating the video, but the tunnel and/or the token have been changed since recording this

[@djKenpLan09]

Just saying "what a great video!" :)

[@LordHog]

I followed this video and another one. I was able to get the tunnel working, but the Access - Application using email access one time pin via email isn’t working. I am not presented a login page. I bought the domain via Cloudflare just so I didn’t run into any DNS propagation issues during initial setup.

[@deuts]

Nice video. Just so timely for my current situation. Just a question, though. What if I want to do this in a VPS, and I don't want to be opening ports in my docker-compose file?

[@DBTechYT]

your containers will always have to have ports associated with them if you want to access them. But you can install this the same way on a VPS and access it that way

[@ierosgr]

Nice video nice presentation. So it doesn t need to have a static Ip from your ISP in order to set this up. At some point when you were going to create an A record (old way) you filled in an ip address. Could there be placed a name like from a dyddns service?

[@DBTechYT]

It does NOT need a static IP. It does NOT need port forwarding. What it DOES need is for you to buy a domain and point the DNS to CloudFlare like I showed in this video. Once you've done that, you can then use the service with tunnels and there's no need to create A records or CNAMEs or anything else.

[@expression3639]

18:29 But then you have to set up a subdomain for every port you want to "forward". What if an application uses a port range and both UDP and TCP on those ports?

[@WildAwesome]

Thanks for this David, great vid as always. Any chance you might consider doing a video where you include authelia with Cloudflare tunnels? It's what's holding me back from switching from nginx proxy manager. Thank you.

[@DBTechYT]

I might look into it, but I hated setting up Authelia when I made the first video about it just over a year ago

[@gar2k3]

@@DBTechYT you might have hated it, but your tutorial is literally the reason I use Authelia myself. Is it possible to use cloudflare / github / gmail as an SSO provider for Cloudflare tunnels?

[@DBTechYT]

@@gar2k3 You can use a bunch of different options for SSO like Facebook, Github, Google, Linkedin, SAML and a few others

[@ShlomiDavidson]

Hi David. Love your videos, they're awsome. Can you make a video of integrating Authelia with a Cloudflare tunnel? Thanks!

[@DBTechYT]

It's a video that is on my radar

[@ShlomiDavidson]

@@DBTechYT I forgot about Fail2ban, will it work with a Cloudflare tunnel?

[@johnvsf]

Great video! Thank you for sharing!

[@adamgee1956]

Great tutorial, thanks! Will this work (on the free tier) with Immich and remote file uploads? Cheers

[@DBTechYT]

It should work just fine on the free tier

[@kevinhu196]

However, I heard cloudflare tunnel does not allow media access (eg. jellyfin) and because got their accounts banned because of it. I think people should be aware of this implication and search for a way that is not against any TOS. It would be great if you can talk about it.

[@DBTechYT]

I have in previous videos, but you can refer to section 2.8 of their terms here: www.cloudflare.com/terms/

[@ep_dimi]

once again your explanation is great! what is not clear to me is what we do with the ingress rules. What port should we open for the tunnel? For example i use an oracle vps and when i close my services ports and keep open only ports 443, 80 and 22, i have no access to my services. I thought one of reason for using tunnels is to close our service's open ports. At the tunnel's public host names declarations i use my vps external ip. Any help would be appreciated

[@DBTechYT]

There is no need to port forward when using CF Tunnels

[@mvez73]

Thanks for that tutorial. I'm trying to access pihole but it doesn't work. Every other subdomain works perfectly but i can't figure out how to make it work with pihole that need to point to /admin I tried to put admin in the path field but it doesn't work either.

[@nikkonkde]

Thank you for the howto. super helpful. I followed every step, but I have an issue with containers running in the k8s network and sharing the host ip. clouflare doesn't solve the redirection by port.

[@DBTechYT]

I don't do anything with Kubernetes. You're gonna have to get help with that from somewhere else :)

[@nikkonkde]

@@DBTechYTi think truenas-scale is docker. let me check

[@nikkonkde]

fixed. thanks again

[@mrteausaable]

I have PC running windows 10 but I am not sure where to run the CloudFlare Client. It is better to install Docker on Windows then run CloudFlare client or just install CloudFlare Client on PC? What is the better speed and advantages. I have extra PC that can use to install any OS.

[@shawnhaywood4199]

Very informative. Thanks! Once a cloudflare tunnel is installed on a local pc can I also create subdomains for sites on other devices on the same local network - like synology nas, windows pc, etc? Does that require installing a tunnel token on each separate device?

[@DBTechYT]

You'll want to install tunnels on all the devices you want access to.

[@cogiecabuto]

Thank you for this video. It's exactly what I've been looking for. I have a few questions though, where can I ask?

[@DBTechYT]

Here or in the Discord linked in the video description. Either way someone will answer your question when they have time

[@cogiecabuto]

@@DBTechYT If I have 3 different servers at different locations, can a single domain give access to services hosted at each site? Does that mean you have to create 3 tunnels? 1 for each site?

[@DBTechYT]

You can use 1 tunnel or 3. That's up to you, but if you're connecting to 3 locations I feel like 3 tunnels might be a safer bet. You can use a single domain for multiple locations. Also, you can use one domain on multiple tunnels. And you can use multiple tunnels on one domain. They are very flexible this way.

[@cogiecabuto]

@@DBTechYT I assume this works even without public IP? CGNAT? Thanks!