Cloudflare Tunnel - per subdomain access rules.
reddit / selfhosted

----------------------------------------------------------------------
gluebabie · 2023-09-29 23:49

So I have a cloud flare tunnel setup, giving me remote access to my
services on my server. Each service is under a different
subdomain/hostname within a single application. And I have an
application wide policy setup to allow email users with my email and
someone else’s es email. However, when I give them access to my
application they have access to ALL the subdomains/services that I
host. I’d rather they have access to only my Homarr instance for
example, or only my Plex instance, etc. I’d like to be able to assign
these permissions PER email/user. Any thoughts on how I can achieve
this?

----------------------------------------------------------------------
thekrautboy · 2023-09-30 00:21

Honestly, Cloudflare tunnel isnt really selfhosted, but on top of that
why not simply ask /r/Cloudflare for assistance? its not like CF is a
tiny one-person github project, but a huge company with actual support
channels etc.

----------------------------------------------------------------------
bobbarker4444 · 2023-09-30 00:39

This isn't something I've tried, but it looks like Zero Trust >
Gateway > Firewall Policies might do what you're looking for in an
less-than-elegant way

----------------------------------------------------------------------
gluebabie · 2023-09-30 01:37

Will do. And I know, but it’s partially self hosted and often used in
conjunction with self hosted services so this seems like a fair first
route to take for support.

----------------------------------------------------------------------
thekrautboy · 2023-09-30 01:40

To me a "fair first route to take for support" for Cloudflare specific
issues would be /r/Cloudflare, or wherever else outside of Reddit they
have active communities. But im just weird that way.

----------------------------------------------------------------------
gluebabie · 2023-09-30 01:48

If you search “cloudflare tunnels” posts in r/self hosted there are a
multitude of results discussing it.

----------------------------------------------------------------------
thekrautboy · 2023-09-30 01:49

Wow really?

----------------------------------------------------------------------
TerminalFoo · 2023-09-30 15:35

You need to set access rules per application. This is doable.

----------------------------------------------------------------------
kmisterk · 2023-10-01 18:02

Hey, gluebabie!

Thanks for your submission to selfhosted.

Your post has been removed due to a violation of **Rule #5a:**

## It's Not Wednesday

Posts that do not directly relate to a self-hosted tool, but relate to
the process of self-hosting (Including dashboard posts, support tools,
hosting options, local CLI tools, etc.) are only allowed to be posted
on a Wednesday.

If you believe this to be incorrect, please [message the mods](https:/
/www.reddit.com/message/compose/?to=/r/selfhosted&subject=Removed For
Wednesday Only Content&message=[Removed
Post](https://www.reddit.com/r/selfhosted/comments/16vrhxx/-/\)) so
that we can revisit or clarify the removal reason.