Hey, I don't really have any resource, I also stumble and mess with it myself until I got the hang of it. I guess I can write a blogpost on how Cloudflare Tunnel actually works and how to configure it easily.
I'll update you once I do.
maya329
joined 2 years ago
Currently self-hosting on an old HP Z600 I bought second hand with the following specs:
- CPU — 2x Intel(R) Xeon(R) CPU X5660 @ 2.80GHz
- RAM — 96GB ECC DDR3 (6*16GB)
- Disks — 4TB HDD for Ubuntu, 10TB HDD for NextCloud and 2TB Sata SSD for Docker
For services, I'm currently running the following:
Docker
- Portainer — CF Tunnel
- FreshRSS — CF Tunnel
- ArchiveBox — CF Tunnel
- Adguard Home — Local
- 2x Uptime Kuma — CF Tunnel
- LinkAce — CF Tunnel
- TheLounge — CF Tunnel
- Watchtower — Local
For public access dockers
- Feedropolis
- Mirotalk SFU
- FiveFilters RSS
- Taiga
- 2x Mattermost Servers
- 8x Wordpress Staging Sites
- 1x Wordpress Dev Sites
For ubuntu, I'm running a few services and apps like:
- ScreamingFrog -9 sites using LAMP stack
- Aria2c with AriaNG
- NextCloud
- Plex
- 4x WebHooks server for communities
- Couple of API end points using Apache reverse proxy
- OpenVPN
- CrowdSec
Cloudflare is the only service that I trust enough with my data. My domain names are also hosted there, so there's no reason not to make use of Cloudflare's CDN and security vs having to harden my own server all the time, or spinning up instances all over the world for faster access and keeping it all updated at all times. I'm also using CrowdSec as a backup behind Cloudflare.
I'm not behind a CGNAT, and I also have a static IP. However, I think Cloudflare's Zero Trust is good enough since I'm already using their Cloudflare masking. No reason not to do it considering I have access behind most of my services.