Using cloudflare tunnels means nothing is encrypted and cloudflare sees all.

This.

deleted by creator

Disappointed to see the cloud people preaching uptime when most cloud offerings have severe downtime issues weekly.

Stop living in a bubble.

Github was down yesterday and that isn’t fun.

Stuff still goes down all the time on the cloud. More than on prem in my experience.

They don’t even properly track their downtime and lie about 99.9

Arch ftw

Wireguard doesn’t send anything back if the key is not correct.

Because of this, Tailscale port swapping is inconsequential vs wireguard here.

Tailscale transfers trust of your VPN subnet to a third party, which is a real security concern.

I agree SSH service will be attacked if they are plainly exposed, out of date and allow login challenges.

Also agree that under or misconfiguration is a massive cause for security issues.

deleted by creator

Authelia does support oidc and its amazing.

https://developers.cloudflare.com/cloudflare-one/policies/gateway/http-policies/tls-decryption/

https://community.cloudflare.com/t/does-cloudflare-proxy-servers-decrypt-my-data/145691

Afaik, they decrypt and recrypt all traffic.

I just don’t see the point of using cloudflared. Its easy to use but it just gives all your data to cloudflare in return for very little.

deleted by creator

You should try it.

If you can’t use git I don’t see how you’re gonna do with other things. It’s dead simple.