Cloudflare tunnel zero trust access rules
reddit / selfhosted

----------------------------------------------------------------------
SatisfactionNearby57 · 2023-10-01 18:55

I am testing cloudflare tunnels and they work really well. I just
enabled one time pin and it works nicely. I'm trying to bypass it on
my local network, I think I'm doing everything correctly but still
asking for the one time pin. here's the config screenshots
https://imgur.com/a/webTcMU, pretty basic stuff i'd say!

----------------------------------------------------------------------
lucassou · 2023-10-01 19:18

Not a cloudflare expert but have you tried specifying your public IPv4
? You still access cloudflare servers through the internet even when
in your own lan, so it's probably your public IP address that you
should add as a rule and not your private one.

----------------------------------------------------------------------
SatisfactionNearby57 · 2023-10-01 19:23

I was afraid it might be asking for the public ip, which for me is
dynamic.

I had traefik previously and it was getting a bit hard to manage, but
I might go back to that setup.

----------------------------------------------------------------------
lucassou · 2023-10-01 19:46

Have you checked that your public IP actually changes regularly ?
Technically I had dynamic IP adresses but it never changed once in 5
years. For cloudflare tunnels I personnaly set the token validity to
one month so it's not an annoying having to auth everytime I access my
services.

----------------------------------------------------------------------
shizno2097 · 2023-10-01 19:50

If you have pihole running on your lan, you can add a custom entry to
resolve your public address directly to your local ip