Setting Up Cloudflare Argo and Access on a Raspberry Pi

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • (This post should read "Argo tunnel" instead of just "Argo")

    I did the same to enable secure access to services via SSO at work. I used Harbormaster[1] to deploy Compose files, but it's otherwise the same setup.

    One of the big advantages this has is that the services can't be accessed any other way (not even from the same host, as they only listen inside the Docker network). That makes it hard to forget some port exposed because you listened to 0.0.0.0 instead of localhost.

    Cloudflare access is very easy to set up SSO with, as well. I'd recommend this setup if you need it, though for home usage I usually just set up Caddy as a reverse proxy with basic auth, as I'll be the only person using this and I don't want Cloudflare MITMing my personal stuff.

    [1]: https://gitlab.com/stavros/harbormaster

  • vouch-proxy

    an SSO and OAuth / OIDC login solution for Nginx using the auth_request module

  • Cool! I currently do a self-hosted version using nginx, certbot, and vouch-proxy [1]. Nginx checks with vouch for every HTTP request and redirects to Google for SSO if unauthenticated. It works well for humans in browsers, but not so much for robots. I'm sure I could configure nginx to do token-based auth, just haven't had the need.

    [1] https://github.com/vouch/vouch-proxy

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • awesome-tunneling

    List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting.

  • Cloudflare Tunnel (the service used here) is my current recommendation for most people when it comes to tunneling. Nobody wants to pay for tunnels, and it's the best loss-leader product offered by a reputable company that I'm aware of.

    My only concern is if it gets popular enough that a lot of self-hosters start using it for things like Plex and Jellyfin, which I believe is against Cloudflare's TOS, it might not remain free.

    If you prefer to self-host your tunneling server as well, I maintain a list here:

    https://github.com/anderspitman/awesome-tunneling

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Reverst: Reverse Tunnels in Go over HTTP/3 and QUIC

    4 projects | news.ycombinator.com | 8 Apr 2024
  • I'm looking for an SSO server/reverse proxy with features I'm not sure exist

    2 projects | /r/selfhosted | 23 Jun 2023
  • AWS EKS front end authentication with Okta?

    1 project | /r/aws | 29 Jan 2023
  • cloudflare and ingress-nginx

    2 projects | /r/kubernetes | 23 Nov 2022
  • Yubikey support in Jellyfin

    2 projects | /r/jellyfin | 18 Aug 2022