Cloudflare Tunnel Setup Guide - Self-Hosting for EVERYONE
Рет қаралды 132,776
Күн бұрынMany people have issues self-hosting their services if they're behind a CG-NAT. Luckily, we can get around that with the help of Cloudflare tunnels.
Setup Guide - raidowl.hostyboi.com/2022/08/...
Cloudflare Guide - developers.cloudflare.com/clo...
Ingress - developers.cloudflare.com/clo...
Run as service - developers.cloudflare.com/clo...
-------------------------------------------------------------------------------------------
🛒 Amazon Shop - www.amazon.com/shop/raidowl
👕 Merch - / raidowl
-------------------------------------------------------------------------------------------
🔥 Check out this week's BEST DEALS in PC Gaming from Best Buy: shop-links.co/cgDzeydlH34
💰 Premium storage solutions from Samsung: shop-links.co/cgDzWiEKhB8
⚡ Keep your devices powered up with charging solutions from Anker: shop-links.co/cgDzZ755mwl
-------------------------------------------------------------------------------------------
Become a Channel Member!
/ @raidowl
Support the channel on:
Patreon - / raidowl
Discord - bit.ly/3J53xYs
Paypal - bit.ly/3Fcrs5V
Affiliate Links:
Ryzen 9 5950x - amzn.to/3z29yko
Samsung 980 2TB - amzn.to/3myEa85
Logitech G513 - amzn.to/3sPS6yv
Logitech G703 - amzn.to/3sATW5R
WD Ultrastar 12TB - amzn.to/3EvOPXc
My Studio Equipment:
Sony FX3 - amzn.to/3qq4Jxl
Sony 24mm 1.4 GM - amzn.to/3mA1TEK
Tascam DR-40x Audio Recorder - amzn.to/3EvTPeq
Rode NTG4+ Mic - amzn.to/3JuElLs
Atmos NinjaV - amzn.to/3Hi0ue1
Godox SL150 Light - amzn.to/3Es0Qg3
Join the Discord: / discord
links.hostowl.net/
0:00 Intro
1:12 What are Cloudflare tunnels?
2:06 Setup
4:43 Create the tunnel
5:12 Setup the config file
6:34 DNS
8:00 Ingress setup
9:30 Run the tunnel
10:52 IT WORKS
11:20 Let's make another route
12:45 Install as a service
12:59 We did it
14:29 Comment of the Week
15:16 Conclusion
@KBlakK Жыл бұрын
Love your content. Your sense of humor keeps me engaged but your knowledge is impeccable
@acc3366 2 жыл бұрын
I could not find a solution that worked for me until your video. You took the ouch out of pain. Thanks...Great video!
@peterg4527 2 жыл бұрын
Awesome Video I love these types of videos ! Loving your self-hosting series of videos keep up the great work your channel made my top 5 must watch list for Tech
@Vivek-mv9di 2 жыл бұрын
Followed this and got this up and running. Thanks so much for this tutorial :)
@RobertDysonAtlanta 4 ай бұрын
Thanks so much for this! I was banging my head against the wall going through the Cloudflare docs, and within 15 minutes I had it going thanks to you!
@KenPryor Жыл бұрын
Thank you so much for this video! I've been going crazy trying to figure out how to get around the CG-NAT and this did the trick.
@leopold7562 Жыл бұрын
I've been using Cloudflare for a while now and have a static public IP which has made things a bit easier, but I've had to do all my routing using reverse proxy and having port 443 open, which I'm not overly keen on and sometimes it doesn't work properly. I'd tried the tunnel, with absolutely zero success. But having watched your video, I can not only see where I was going wrong, but I can also now see how to use multiple services over the same tunnel! Thank you so much for explaining it in such a way as to make me think, "Yeah, that's really easy, is that."
@PeterBatah Жыл бұрын
Excellent presentation. Clear and precise. Thank you for sharing your time and knowledge with us.
@andreleblanc5057 Жыл бұрын
Finally you explain what I needed since a year !!!! Thanks!
@karlos-oliveira Жыл бұрын
congrats from Brazil man, your video is just what i was looking for, thanks!!!
@joshuamaserow Жыл бұрын
Dude, loving your channel!
@Grs-im93 3 ай бұрын
Man, you are a God´s bless! I was giving up of my umbrel because of this.. Thank you so much, cheers from Brazil!
@reidcardwell 5 ай бұрын
Great walk-through! Some of the menus have changed a little, but everything still works exactly as in this video. Thanks!
@Theeporkchopexpress Жыл бұрын
This is amazing, I know what I'm working on this weekend! Great video!
@it-expat-china Жыл бұрын
Get this working on my first try (use my pi-hole server as the lab rat), extremely helpful tutorial. Many thanks Brett.
@tw4093 2 жыл бұрын
Followed along and got two of my services running! Awesome how to! It's a real life saver having moved to an ISP that is using CGNAT (starlink).
@BustinCasts Жыл бұрын
I'm in the same boat with the same ISP. Up until finding this video I've been using a Hoppy connection (Wireguard Tunnel from VPS). While it fits the bill and works, I'm excited to give this a shot next. I'm kind of disappointed it only took me 8 months after he put this out there to find this video. lol
@dastiffmeister1 2 жыл бұрын
Brett bringing out those videos hot & fast. F* Yeah! Great content, dude.
@DamienLee69 Жыл бұрын
What seemed like reading and watching the entire internet of tutorials, even the for dummies ones and getting stuck on this step or that, THIS finally worked!! Almost as easily as I thought it should! I had to make changes, being on windows and I did run into errors for sure. One being that if I pointed to "localhost" it went to a completely different app, so i started over and used my machines IP instead and eventually..voila! Even added an extra app so i knew i could recreate it if i wanted! Thak you so much!
@sharvinzlife 2 жыл бұрын
Thanks 😍 I'm under CG-NAT. I was using Ngork, Tailscale and all, never had a detailed video of Cloudflared tunnel set on KZfaq. This is perfect thanks a lot.😍
@angeloerasto 2 жыл бұрын
What is the latency like?
@majorgear1021 Жыл бұрын
Remember - If a product is free, then you are the product being sold.
@coryvassaux Жыл бұрын
Thanks for this video! Helped get a couple of my services online and subscribed to the channel!
@habteadbaru7768 Жыл бұрын
Thanks for an amazing video, I'm definitely going to try this weekend
@phobes Жыл бұрын
Oh. My. God. This is a billion times easier, and probably way more secure, than running a reverse proxy. Thank you!
@leocode128 Жыл бұрын
This video is soooo important for me as i want to access my services from anywhere but buying a static public ip costs quite a lot
@hajdaniel5778 2 ай бұрын
It worked, finnally, I've been trying for a moth now to set up a web server, thank youuuu
@calotreze Жыл бұрын
Dude!!! Awesome vid, I just discovered this existed. Thank you!
@marioalbertoestrella Жыл бұрын
Thanks a lot very straightforward, after 12 hours of banging my head against Cloudflare five minutes after watching your video I have everything running
@JamesT65 2 жыл бұрын
This is a great tutorial on cloudflared. If anyone has any issues with the site showing can’t provide a secure connection or ssl issues in the browser in general. you have to enable universal SSL and it will all magically work with no SSL issues.
@mitchross2852 Жыл бұрын
Thanks dude! This really helped me out I was stuck af. I had prior experience with cloudflared, but they changed some stuff.
@user-hq4tg6th6z 4 ай бұрын
Great info. Thanks so much!
@toxicnoodle1238 Жыл бұрын
Brilliant video! Thanks for the tips
@crowlsyong Жыл бұрын
im so glad this exists.
@trump1688 Жыл бұрын
This is really helpful, thank you for your sharing! 👍
@mahdimuhib Жыл бұрын
thank you so much. this worked great
@pepper5105 2 жыл бұрын
that was quick. i asked about this 2 days ago. thanks my man.
@RaidOwl 2 жыл бұрын
Gotta give the people what they want lol
@AmrBedair Жыл бұрын
You solved my exact problem .. really thank you
@nightmarenova6748 Жыл бұрын
i got a domain and i was soo dissapointed that my ddns wouldnt work properly !!! Thank you soooo much for this , i can access it now from different external ip's as well
@chillydickie 2 жыл бұрын
This is awesome. Subscribed
@henloitsdiego 7 ай бұрын
i have been struggling for weeks trying to get tunnels to work on my home lab. I followed your instructions (or so i thought) and it didn't work I had to triple check every single command i ran but after 4 containers and 6 VMs, i have finally set it up thanks to you!
@chromosome24 Жыл бұрын
"its free" - for now :) Great tut btw. The documentation was spiking my blood pressure, so thx!!
@mattiashedman8845 2 жыл бұрын
Finally a video that made sense! Without knowing it you did point out a few things I had missed! And the best part, I can now get rid of that monthly $5 fee for a public IP! Thank you! I do hope you take this another step and talk about WARP as well, and how to reach your LAN when your not at home, thus this also replaces my home VPN setup. :)
@aagm. Жыл бұрын
Tailscale
@BustinCasts Жыл бұрын
@@aagm. nailed it. Tailscale is freaking awesome. 20 devices with a free account, can't be beaten in my opinion. I use it everyday. It's actually my route back into my BlueIris box to check my cameras while I'm away from home. Stupid simple to use.
@ryklebaron Жыл бұрын
@@aagm. same here
@siddharthchordiya 2 жыл бұрын
Its Nice to see that we get to see two Creators in One Video : 1. Brett Himself a.k.a Raid Owl 2. Jeff from Craft Computing (Looking at his t-shirt) Looks like you are also on the way to become a Homelab Nerd just like him
@RaidOwl 2 жыл бұрын
“Welcome to Raid Owl, as always I’m Brett”
@shawncampbell700 2 жыл бұрын
@@RaidOwl Put a trademark on it and MAKE Jeff notice you. Lol
@ArifKamaruzaman Жыл бұрын
I got confused for a sec seeing Craft Computing, wheres the beer. hahaha.
@gadgetb0y Жыл бұрын
Thanks so much for this!
@nixxblikka 2 жыл бұрын
Wow really easy! Nice video!
@kaisersakhi4239 8 ай бұрын
Helpful, thanks!
@techaddressed Жыл бұрын
Great video! I have a nginx setup on a cloud provider anyway, so I'm using it as a reverse proxy with Zerotier providing direct access to my internal systems. Same end result - no firewall openings required.
@DaviAreias 2 жыл бұрын
This just saved me months of lifetime, no more waiting hours because Ngrok timed out or localtunnel decided to change the server name :D
@antoninoromeo4015 2 жыл бұрын
Cool!!! it works great!! many thanks
@garypaulson5202 2 жыл бұрын
This is great, thanks!
@DrCJones 20 күн бұрын
I love your fancy website! 1:51
@tigeroats913 2 жыл бұрын
i tried this once but it didnt work well but i tried this now and it works great, and i dont even have an ssh certificate and its secure so this is like awesome
@niyazniyazov Жыл бұрын
Thankssss !!! Very very very much !!! Exellent jobç you saved me !!
@cocidy 2 жыл бұрын
Holy shit thank you!! I work from CGNAT and cant get a public ip yet, but this helped!
@bwalamadumark2273 Жыл бұрын
this is so good.... great tutorial.....
@srihariravikumar5897 2 жыл бұрын
Great content thanks👍🏻👏🏻😊
@willrun4fun 5 ай бұрын
Since I'm on a NAT IP this might finally be the guide I needed to get a few game servers and services going. I also need to setup pfsense first and make some dmz vlans.
@andreibirsan4541 Жыл бұрын
Good stuff!!
@timdekruijf Жыл бұрын
This is awesome!
@misubear Жыл бұрын
Good video!
@leesweets4110 2 жыл бұрын
Total lifesaver. Cant find out how to do this anywhere else.
@harrychristianx Жыл бұрын
Thank you!!
@jamesa4958 2 жыл бұрын
Awesome Thank you
@JangoTechFlare Жыл бұрын
Wow thanks it works on my nat vps server
@Glatze603 2 жыл бұрын
That´s really awesome - vaultwarden now runs on an ubuntu server in my local dmz behind a cgnat, without a reverse proxy and without a piblic ip. I do not need my cloud server any more for a wireguard tunnel between my ubuntu server and this vps for running nginx-proxy-manager with certbot. That´s a really great and more secure solution than everything eles I know till now. Thanks for this inovation!
@Glatze603 2 жыл бұрын
Is it possible to use nginx with further apps with this technic/method? I would like to use authelia for some apps though cloudflare tunnel, but don´t know how to configure. Maybe someone can give a tipp? I saw a video from IBRACORP, but that didn´t work?!? Thank´s a lot 🙂
@Glatze603 2 жыл бұрын
I love cloudflared, because I don´t have a public IP (cgnat!). With cloudflared I have a fantastic solution for my cgnat-problem, but I need authelia, because most apps need 2fa. So the question is, how could this be configured? I already know how to work with npm and authelia and I am able to use cloudflared, but I don´t know how to combine both?!? If you know, please explain, thanks :-)
@Glatze603 2 жыл бұрын
Ok, I got it working perfectly with Cloudflare Zero Trust Applications - no further need of nginx proxy manager 😎😁👍
@LostOnTheLine Жыл бұрын
Watching this again while looking for something that I saw mentioned somewhere, & I wanted to clarify that I enjoy your videos & thank you for providing this information I also wanna note that Smart Fridges are generally Linux systems... So you probably COULD run cloudflared on a Smart Fridge
@SavannahTL Жыл бұрын
solid info. 👍
@adamyork2333 2 жыл бұрын
Awesomeness!
@thebeatconnect1 2 жыл бұрын
I managed to set up a cloudflare tunnel last week. And it's been really helpful, I can spin up containers and VMs and just create a subdomain and use Nginx Proxy manager to do a reverse proxy. Within 5min my services are exposed, with SSL.
@RaidOwl 2 жыл бұрын
Hell yeah!
@SeanAnthony Жыл бұрын
Good video, but I must say doing this through the CLI is way more confusing than using the Cloudflare GUI. I was also able to use the GUI restrict access and to setup authenication. However there is always more than one way to skin a kat. :) Thanks for the work you put into this videos.
@vap1777 Жыл бұрын
the CLI was the only way for a while lol
@KevinWhiteJr 2 жыл бұрын
Great thing about using Tunnels is that you can run multiple tunnels from different machines. I am playing with Zero Trust for authentication purposes. This will allow me to lock my services behind an IdP, such as Google. Great video!
@skoal6879 Жыл бұрын
This is my next question how to lock it down after exposing it so only I have access.
@KevinWhiteJr Жыл бұрын
@@skoal6879 I have Google Workspace setup as an IDP. I have all my services using that as the authentication method through policies. I then have a bypass for any traffic coming from my external IP address. I also use WARP to access my home network when I am away from home.
@Shubham_Gupta_ji Жыл бұрын
Very helpful video sir 👍. Please make a video on how to set up ftp server using cloudflared tunnelling ..
@jaxwylde2139 Жыл бұрын
Another excellent how-to. If you're looking for more content, you may want to consider doing an update. Cloudflare has deprecated Tunnels, and replaced with Zero-trust. I know they're the same thing (just different branding on their part). Now the dashboard setup (vs cli) is much easier and quicker to setup and manage.
@user-xy1tp1jn1q 7 ай бұрын
You can't do RDP in the dashboard though which is the worst part. Or SSH I believe. Maybe you can SSH but if you want any kind of graphics you got to do the CLI. I struggled through it for weeks until I finally got it working.
@123djek Жыл бұрын
Thanks!
@fourmobro6214 Жыл бұрын
Great video. Here are some quick follow up questions: 1. If this hosted/external service is currently proxied via HA-proxy in pfSense, should it be removed? 2. Are you still using HA-Proxy for any hosted/external services? If so, which? 3. Have you successfully used this tunnel process to expose your self-hosted bitwarden? Any issues? 4. This method should eliminate the need for running cloudflare_ddns to keep our changing public IP address in sync with Cloudflare, correct?
@copykon 2 жыл бұрын
I'm learning this now lol
@nixxblikka 2 жыл бұрын
Oh reading my mind what I wanted to get in next
@RaidOwl 2 жыл бұрын
I have super powers 😳
@JosePerez-bd1we Жыл бұрын
"I am using nano, fite me", best line
@chrisevans4634 2 жыл бұрын
Instant like for craft merch!
@mathieuleclerc4136 Жыл бұрын
OMG thats good!
@joseph.micheal.romero Жыл бұрын
You rock!
@RaidOwl Жыл бұрын
No you rock!
@CRK1918 Жыл бұрын
Very good video. I don't need this myself, but it's useful for those people who live in apartments. Do you remember any other services besides this? Because we give too much power for Cloudflare in controlled.
@secretbaboy 2 жыл бұрын
Please do a guide for WARP VPN with no split tunnel in order to access your home network without needing ingress rules.
@sillycoda1084 Жыл бұрын
I JUST FINISHED THIS END TO END AND SETUP MY OWN DOMAIN AND I FEEL LIKE CRYING WITH HAPPINESS
@sillycoda1084 Жыл бұрын
mark my words, you're at the cusp of what Linus Tech Tips was as a channel around 10 years ago, but in a completely new field that didn't exist then.. back then it was all about using hardware for just gaming, but now that we're grown up and AAA games suck donkey poo, so instead spend time focusing on taking a step beyond what you can do with the new hardware you just bought.. this is EXACTLY what students and passionate people need.. THANK YOU SOO MUCH AGAIN
@majorgear1021 Жыл бұрын
did you really need to shout that ? caps lock keys should be removed from all keyboards.
@michaels5167 Жыл бұрын
By chance do you have an updated video of guide on this? The docs and setup appear to have changed significantly since March.
@123saurabhnaik 2 жыл бұрын
Awsome Vid, but if we make Docker Tunnel it would be much easier and life saver 🙂
@n0madtv 2 жыл бұрын
The traditional way to get around not having a static IP is to use dynamic hostname providers. A lot of people might not know, but cloudflare also supports dynamic IP's... Just saying, you can get around the CG NAT with a hostname. Tunnels are better for security and privacy purposes.
@mohdsyukrihashim2299 2 жыл бұрын
could you explain further?if im using duckdns,can it be used with cloudflare?
@jacobbiancardi9153 Жыл бұрын
Also make sure your architecture is correct. None of the downloads for Debian work with 32 bit lite. Hopefully they add support in the future.
@The1neo34 2 жыл бұрын
"Im using nano, fight me" 10/10
@bhedavivek 2 жыл бұрын
"I'm using nano, fight me" - love it 🤣. Use the tools that work for you folks
@aleg_911 2 жыл бұрын
Nice T-shirt
@ChrisDePasqualeNJ Жыл бұрын
First - Excellent KZfaq Channel. Did you really quick your day job to do KZfaq? Kudos to your vidio editor too. 🙂 My question is. I currently expose a random port on my firewall and then use Cloudflare Origin rule to rewrite 443 to the random rule that I have open on my firewall - then port Forward from random port to 443 to my Nginx proxy server. And now for the question. With CloudflarD Tunnels, do I still need Nginx? Cuz the last two times I installed this on my Docker it broke my RPI. Thank you and keep up the good work. Chris
@RaidOwl Жыл бұрын
Hi there! Nah I currently still work a full time job and do all my own editing haha. For the tunnels you done need Nginx but it could make it easier if you don’t wanna set up Ingress rules and deal with ssl through the tunnel.
@vulcanolog0 Жыл бұрын
great content thank you!! how do i connect this tunnel to my postgres container? havent make it work so far
@zeusro163 2 жыл бұрын
This worked perfectly for one of the few sites I tried-Komga. However, tonight, I changed the port that my Komga server was running on to try a guacamole install (I thought I read that port 8080 was required). I changed the port in my config.yml for the new port Komga was running on, saved the yml file and restarted the tunnel. No dice. I looked to see if it was a firewall issue and that didn't seem to help at all. It took a little bit of time, but I finally got Komga working again on port 8080. Any advice on what may have happened? I put in the ingress rule that you showed, but that didn't appear to be the problem. Thanks!
@kritterkult1318 Жыл бұрын
It's hopeless hosting inbound connections on a home system. Internet providers seem to frown upon that since they are selling you the download bandwidth, and selling businesses the upload bandwidth. That's why your upload speed is less than download. The external IP address my router says I'm at, is not reachable from the Internet. The dynamic IP address also makes self hosting unreliable because it takes a while for a dynamic DNS to take effect if your address changes, and in that time your website will fail for users. A reverse tunnel solves all this and is a slam dunk obvious solution.
@vishaljadhav3568 2 жыл бұрын
Great video! Does single dashboard subdomain works for all the services available in Hiemdall dashboard or each service require separate subdomain configuration?
@Nur__ Жыл бұрын
I have the same question, might have to try it out to see
@maciejmisztal992 Жыл бұрын
this is great, can you comment if it's possible to setup private networking via tunnels against a private kubernetes ingress? assuming we host cloudflared cluster-side?
@dlengelkes Жыл бұрын
Excellent information but how would I create a ssh tunnel to an esxi server?
@awfulcitizen6355 Жыл бұрын
@RaidOwl I came to this video yesterday to get this setup, and I thought I had it understood... I had to come back today, and take notes, so I can practice this over and over so I don't forget it. Something I am curious about is, if you use the UI in cloudflare zero trust, how do you add the ingress contents? Is it possible to add the config.yml by hand to the same location as you do it via CLI ??
@Tiffyboo383 8 ай бұрын
Great tut... To bad its not a WIndows Tut...
@paulo.valverde 3 ай бұрын
Thanks for this! I have a newbie question: Would you be able to connect from outside your network with this? For example, if you’re hosting Nextcloud and want to access from another city. Or did you you have to use a VPN? Thanks again!
@automaestro1611 11 ай бұрын
Thank you very much we appreciate your time and effort. From where you got the 10.0.0.26:9444 for the ingress? I'm also facing an error "unable to reach the origin service" what could be the issue and it's resolution?
МИЛАНА ТУТ 👀
Рет қаралды 5 МЛН
Oscar's Funny World
Рет қаралды 20 МЛН
Raid Owl
Рет қаралды 356 М.
Lawrence Systems
Рет қаралды 180 М.
Jim's Garage
Рет қаралды 43 М.
DB Tech
Рет қаралды 81 М.
PRO Hi-Tech
Рет қаралды 47 М.
Immersed
Рет қаралды 63 МЛН