Wireguard VPN or Cloudflare Tunnel?
reddit / selfhosted

----------------------------------------------------------------------
iizakill · 2023-12-23 22:53

I am new to self-hosting and want to access my sites outside my home
network. Given that only me and hardly a few other people will access
my website (overseer) - is there any disadvantage if using Cloudflare
Tunnel over Wireguard VPN?

​

My setup has qBitTorrent along with radarr and sonarr, all three
running on a Surfshark VPN. Does Cloudflare ever know what is
happening other that my requests to see the Overseerr website?

----------------------------------------------------------------------
nathan12581 · 2023-12-23 23:04

I’d honestly just use wireguard. Unless you want other people and
yourself to access your service through a domain name, then use
Cloudflare. Both are great and simple to use

----------------------------------------------------------------------
ericesev · 2023-12-23 23:07

As long as the remote solution requires some sort of authentication,
to keep everyone on the internet from accessing it, then it is likely
fine. VPNs do that by default. Cloudflare does that with Zero Trust
Access, but this solution can break mobile apps. A VPN is also end-to-
end encrypted, whereas Cloudflare is only hop-to-hop encrypted.

----------------------------------------------------------------------
trisanachandler · 2023-12-23 23:24

I do both for different use cases.  I use azure ad for the zero trust
auth, works really well, but as mentioned some mobile apps need the
VPN.

----------------------------------------------------------------------
654354365476435 · 2023-12-24 00:07

I wish there was a way for mobile apps to handle extra authorization

----------------------------------------------------------------------
ericesev · 2023-12-24 00:35

So many of the parts are already there. I think it would just take
someone to define the standard for how the parts fit together. Then
app developers & proxy implementations could work together.

I've modified my Home Assistant backend [to use an authentication
token in a cookie](https://gist.github.com/esev/acdab7e5258d6cbe0d60b4
6b2b7c43cb). This will allow SSO with Cloudflare. But the mobile app
is unaware of how to use this.

----------------------------------------------------------------------
iizakill · 2023-12-24 01:35

Thank you for the explanation :) Very helpful

----------------------------------------------------------------------
tomistruth · 2023-12-24 02:36

You can access wireguard through domains no problem by pointing it to
the wireguard ip. Once wireguard is activated, the domain can link to
the vpn ip no problem.

----------------------------------------------------------------------
jbarr107 · 2023-12-24 11:59

Cloudflare Tunnel and Application.