[Script Info] Title: [Events] Format: Layer, Start, End, Style, Name, MarginL, MarginR, MarginV, Effect, Text Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Hi everyone, welcome back Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,So today we're going to try something a little bit different Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,We're gonna start a new video series Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,about all the different ways to expose or access our homelab Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,from the internet Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,The reason is mainly because there's tons of options out there. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,and i feel like it's not talked enough about on YouTube Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Especially the security part Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,which is most important Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,almost everyone just assumes it's secure which isn't always the case Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,so make sure to hit the like button Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,subscribe Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,and let's get started Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,okay so how to do it Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,to expose our homelab there are five main ways Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,1. Secure Tunnels like Cloudflare Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,2. Reverse proxies like Nginx Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,3. Traditional VPNs like Wireguard or OpenVPN Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,4. Mesh VPNs like ZeroTrust and Tailscale Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,and lastly the old classic port forwarding or NAT Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,So let's break down each one of them quickly to understand the differences Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,first secure tunnels like Cloudflare Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,This is often defined as secure tunnels to access your app without exposing your IP address Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,making remote access easy Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,it's also fairly easy to setup Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,however, by default it's not secured enough Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,and solely reling on your app security Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,but this can be improved Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,we'll cover this later in another video Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,next reverse proxies Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,like nginx Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,it's a server that sits in the middle and forward requests to your homelab Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,helping you manage multiple services under one domain Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,while adding another layer of protection Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,you will have more control over your services Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,and how to manage them Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,however, it exposes your IP and you must open a port on your router to access it Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,next, traditional VPNs like Wireguard or OpenVPN Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,it created an encrypted tunnel between your device and Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,your home lab Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,making it feel like you are on the same local network Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,it's good for privacy and security Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,but only useful when you are the only user because Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,it's impossible to share access without sharing your private key Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,to other users Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,next, mesh VPNs Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,like ZeroTier or Tailscale Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,this is similar to normal VPns except it connects devices between each other Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,instead of connecting them to a central server Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,it has more control over normal VPNs in the way that you can choose which devices to share Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,but you must manually join the network Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,each time for each devices you want to give access to Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,finally NAT this is a classic way of opening specific ports on your router Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,to expose your homelab Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,it's simplicity also carries high security risk if you rely on it alone. Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,keep in mind NAT often gets used with other Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,methods like previously showed Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,but going purely [on it's own] port forwarding is a no-go for security setups Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Now, you may be wondering, Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,What's the most secure setup? Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,to expose your home lab? Dialogue: 0,9:59:59.99,9:59:59.99,Default,,0000,0000,0000,,Actually,