EXPOSE your Homelab to the INTERNET?! (Be Careful)

Hi everyone, welcome back

So today we're going to try something a little bit different

We're gonna start a new video series

about all the different ways to expose or access our homelab

from the internet

The reason is mainly because there's tons of options out there.

and i feel like it's not talked enough about on YouTube

Especially the security part

which is most important

almost everyone just assumes it's secure which isn't always the case

so make sure to hit the like button

subscribe

and let's get started

okay so how to do it

to expose our homelab there are five main ways

1. Secure Tunnels like Cloudflare

2. Reverse proxies like Nginx

3. Traditional VPNs like Wireguard or OpenVPN

4. Mesh VPNs like ZeroTrust and Tailscale

and lastly the old classic port forwarding or NAT

So let's break down each one of them quickly to understand the differences

first secure tunnels like Cloudflare

This is often defined as secure tunnels to access your app without exposing your IP address

making remote access easy

it's also fairly easy to setup

however, by default it's not secured enough

and solely reling on your app security

but this can be improved

we'll cover this later in another video

next reverse proxies

like nginx

it's a server that sits in the middle and forward requests to your homelab

helping you manage multiple services under one domain

while adding another layer of protection

you will have more control over your services

and how to manage them

however, it exposes your IP and you must open a port on your router to access it

next, traditional VPNs like Wireguard or OpenVPN

it created an encrypted tunnel between your device and

your home lab

making it feel like you are on the same local network

it's good for privacy and security

but only useful when you are the only user because

it's impossible to share access without sharing your private key

to other users

next, mesh VPNs

like ZeroTier or Tailscale

this is similar to normal VPns except it connects devices between each other

instead of connecting them to a central server

it has more control over normal VPNs in the way that you can choose which devices to share

but you must manually join the network

each time for each devices you want to give access to

finally NAT this is a classic way of opening specific ports on your router

to expose your homelab

it's simplicity also carries high security risk if you rely on it alone.

keep in mind NAT often gets used with other

methods like previously showed

but going purely [on it's own] port forwarding is a no-go for security setups

Now, you may be wondering,

What's the most secure setup?

to expose your home lab?

Actually, [it] depends on your apps and what you want to do?

In my opinion, it's not about which method you use

but more about how you combine between them

The best setup is to mix them and make

them work all together

to have the perfect setup.

Okay so first let's go to cloudflare.com

Go to "Sign Up"

and free at the website

And let's create a new account now

After that if you already have [a] domain [previously purchased]

enter it here

or for me I'm just going to create a new domain.

For some reason I got an error

when trying to pay

So I'm just going to import an existing domain

Just going to type it here

Okay, so then go down

and choose the free package

Next click on continue to activation

confirm

Next we need to do some modifications

We need to modify, the current name servers

with Cloudflare nameservers

To allow cloudflare to control the domain

to do that

We go to the domain provider

in my case it's NameCheap

So in my case

I'm gonna do custom DNS

and then I copy....

the nameservers

and then I save

It tells you that it can take
up to 48 hours

But it's not true it [can take] just a few seconds

or a few minutes max

But, just in case

If it take a long time to update

Uh, this is normal so

just wait

There is no other choice

Okay, so after a while,

We get this page this means everything is good

Now we go to access page

and then NetZero™ Trust

We choose our account

Next you go to access

Next we choose teamname

Just anything

Then we choose the free package of course

There is zero payment

Next we go to Networks

Tunnels

And we add a tunnel

We choose this one Cloudflared

We name our Tunnel

Homelab uh test

Next it will ask you to choose your home environment

In this case you just uh

You just choose docker

and then we just copy the comment

because we just need the token

we don't need to run anything docker

Then we go back to TrueNAS

and we install

the cloudflared app

This one

and here we got

best what we had

and we just keep

remove everything we just keep the token

So anything before this goes

That's it

We don't need to setup anything else

even storage, it's not necessary

and we install

okday now it's up and running

let's go back to cloudflared profile

now we need to wait until we get uh

Something here in connectors

It will automatically serve

Alright here we go

It's connected

So now we can continue

next

Now we're ready to add our first service

Let's start by adding TrueNAS itself

So let's just copy the IP

Then we choose the subdomain

TrueNAS

and choose the domain

then we choose HTTP

and then the IP

There is nothing specific to add there

That's save

To test this I'm going to disconnect from the VPN

Because i'm not at home I'm connected to my home VPN

So i'm just going to deactivate it

and try this

To show that likely if I try to go to the same IP

it

s not going to work

because I disconnected from the VPN

and if I try

a domain

from the new domain

it works

so now

TrueNAS is accessible

from the outside

But this is not recommended of course

If you want to expose something

just expose the apps individually

don't expose the whole thing

so

So now I'm just going to delete it

and then I'm gonna add something else

Okay now I want to add another service

Maybe, ProxMox