Its good have a proxy manager if im already using Cloudflar tunnels? reddit / selfhosted ---------------------------------------------------------------------- Altair12311 · 2023-10-05 19:14 So right now im linking cloudflare tunnel to my internal IP service directly, but i saw some people linking their tunnels to Nginx proxy manager or Trafeik... and i wonder why? Haves any purpose or adventages to do it in that way? ---------------------------------------------------------------------- Anejey · 2023-10-05 21:10 Something like Nginx gives you a bit more control and allows you to put in more authentication requirements. It also means you only ever need to run a single tunnel, which is pointing to the proxy. After that, the only thing you need to add is DNS entry in Cloudflare and set up the proxy host in Nginx for every service. ---------------------------------------------------------------------- sarkyscouser · 2023-10-05 21:31 Cloudflare is a reverse proxy so you don’t need another running locally, although you can if you like. Most people run a local reverse proxy if they’re directly exposing services not via a tunnel or VPN. ---------------------------------------------------------------------- Altair12311 · 2023-10-05 21:34 thanks you so much ---------------------------------------------------------------------- Altair12311 · 2023-10-05 21:35 Thanks for the info, i appreciate it ---------------------------------------------------------------------- Possible-Week-5815 · 2023-10-06 05:23 yup, nginx for local services and cloudflare tunnel for public services ---------------------------------------------------------------------- atika · 2023-10-06 09:48 You can configure authentication on Cloudflare: https://developers.cloudflare.com/cloudflare-one/identity/idp- integration/ ---------------------------------------------------------------------- Phynness · 2023-10-06 11:38 >more authentication requirements You can have app-level or tunnel-level auth in CFT. >It also means you only ever need to run a single tunnel, which is pointing to the proxy. CFT can also serve up multiple services on a single tunnel. The *real* benefit of NPM over CFT is not including another third party into your circle of trust. I say that as someone that uses CFT. ---------------------------------------------------------------------- indykoning · 2023-10-06 17:38 I do have Cloudflare tunnels going through Traefik. For me it's because I have some services without tunnels and some with. My applications are all available using .local domains as well. It's more a convenience & consistency thing. Where I KNOW everything is managed via Traefik, If I ever were to have to drop tunnels I know I can without worry. Same where if id like an old domain to point to a different service, I can do so without opening Cloudflare. If you want easy configuration and only do everything via tunnels anyways just use that. Cloudflare tunnels is as much of a reverse proxy as anything else and you don't need multiple ---------------------------------------------------------------------- Anejey · 2023-10-06 20:26 Yeah, it's what I meant. It's always better to do things to set things up locally, like the authentication. More control overall. Also, I know you can do multiple services on a single tunnel, but doesn't it still involve editing the config every time? ---------------------------------------------------------------------- Phynness · 2023-10-06 20:27 Not the config, it's just a matter of adding the service in the CF Zero Trust dashboard. ---------------------------------------------------------------------- Altair12311 · 2023-10-06 21:58 Thanks you for the info ---------------------------------------------------------------------- kan84 · 2023-10-07 20:22 I have Cloudflare tunnel to internal IP without any proxy manager. But I also run nginx with pihole so when I am on local network, helps with immich when uploading pics etc. ---------------------------------------------------------------------- Altair12311 · 2023-10-07 20:31 Thanks! i appreciate the info