this post was submitted on 18 Nov 2023
1 points (100.0% liked)

Self-Hosted Main

515 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
1
Benefits of Cloudflare Access (alien.top)
submitted 1 year ago by garibaldi3489@alien.top to c/main@selfhosted.forum
26 comments fedilink hide all child comments
 

For a self-hosted application with a valid SSL certificate and support for OAuth, what are the benefits that Cloudflare Access provides? From what I can tell, it also filters traffic to possibly block attacks? Can it even be used with a self-hosted app if you aren't also running Cloudflare Tunnel? Is there a better alternative (that also integrates with major OAuth providers like Google, Github, etc) for self-hosters? Thanks for the help in understanding how this works.

you are viewing a single comment's thread
view the rest of the comments
[–] QF17@alien.top 1 points 1 year ago (1 children)

I can expose things like HASS and my Unifi controller to the public internet, but stick it behind Cloudflare Access (and Office 365) for protection.

I can essentially unlock my door anywhere in the country, as O365 has conditional access setup to block international logins and I’ve got MFA set up on it.

My port forwarding is only enabled for Cloudflare IP’s, as is Nginx (for extra piece of mind) and I’ve got CF client certificates installed as well.

It mitigates the need for me to configure and use a VPN (although I’ve got one of those configured as well) - which I’ve noticed can be disabled on some networks (I always had trouble using VPN’s on T-Mobile in North America when I was there in 2018)

[–] Darkassassin07@lemmy.ca 1 points 1 year ago

which I’ve noticed can be disabled on some networks

I've found a few networks where my normal VPN connection won't work. Typically they just block all outgoing ports except common ones like 80,443,22,53,etc. I've got a few of those setup so I can try alternates. 22 usually works.