Simple Cloudflare Tunnel Setup on Unraid for Beginners!
Вставка
- Опубліковано 11 лют 2024
- Looking for a simple, yet effective way to bypass the hassle of port forwarding and carrier-grade NAT issues? This tutorial has got you covered! In this short video, I 'll walk you through the steps to seamlessly set up a Cloudflare Tunnel on your Unraid server. Perfect for beginners and seasoned users alike, this guide offers a straightforward alternative to using a reverse proxy. Whether you're dealing with restrictive ISP settings or just want to enhance your home server's connectivity and security, this video will provide you with all the information you need to get started. No prior experience required-just follow along, and you'll have your Cloudflare Tunnel up and running in no time. Dive in now and unlock the full potential of your Unraid server!
Please, if you can and want to support the channel and donate you can do so by Paypal here goo.gl/dw6MLW or check my patreon page / spaceinvaderone
----------------------------------------------------------------------------------------------------------------
The Uncast Show / @uncastshow
----------------------------------------------------------------------------------------------------------------
Need to buy something from amazon? Then please use my link to help the channel :)
USA - amzn.to/3kCikfU
UK - amzn.to/2UsYb1f
Sas cables amzn.to/49M0BgI
Mini SAS 26-Pin SFF-8088 Male to Mini SAS 26-Pin SFF-8088
amzn.to/2V4x9kT USA
amzn.to/3xfkxEl UK
HighPoint RocketStor 6414S amzn.to/3fiXv9s
----------------------------------------------------------------------------------------------------------------
Need a VPN?
PIA is popular with Unraid users as its easy to setup with various vpn download containers - www.privateinternetaccess.com...
Torguard is also an excellent VPN again with both openvpn and wireguard protocls supported.
Get 50% off for life using code spaceinvaderone torguard.net/aff.php?aff=6005
----------------------------------------------------------------------------------------------------------------
Need a cheap windows 10 licence for around $10
consogame.com/software/window...
---------------------------------------------------------------------------------------------------------------- - Наука та технологія
Before making your photos video, please note that cloudflare tunnels has a upload limit of 100mb at once, which limits non chunked uploads (like immich)
immich not uploading file by file? I was considering to use with my traefik and their tunnels
also a good addition for the one who thinks about using this for Nextcloud. Not every NC App are using chunks. I can't recommend using CF Tunnels for NC.
Plex ist also very problematic!!!
@@meccu19 it uploads file by file but if your photo or video is larger than 100mb then you cannot upload it using cloudflare
@@thierrybla01 I was thinking this as these days a video on your phone can exceed 100mb easily. is there a way around this?
I was about to post this, but more so with nextcloud personally. Most of my pics to immich aren't over 100mb (maybe some videos). But for files, absolutely! Had to go with NPM for a few services, and tunnels for the rest.
Thank you for a great guide. Unfortunately Cloudflare have added some extra screens so you guide isn't 1:1 steps any more, but I was able to work it out and now have a tunnel running to a service on my UnRAID box. Thanks again.
100% For those who have never set this up before, you have to create a "team" and "pay" for that before being able to access the zero trust tools. I signed up for the $0.00 level.
Really good video. I've seen others which I couldn't quite follow. This is very clear and informative. Thank you.
Exactly what I needed as I couldn’t get my existing tunnel to work. Spent hours yesterday and then saw this video, deleted all the old stuff and got it to work in minutes. THANKS.
SAME
I am having similar issues of untrusted domains, which will not allow you you log in to next cloud from domain, anybody figured out how, sure would be appreciated, so I can get some sleep
Excited for the video on immach. Was going to tackle figuring out setting it up by myself but figured I might as well just wait for you to release your video on it. Hopefully you release it tonight!
Ed, I literally. Just did this last night, albeit without the "HTTPS" configuring. But now that will be added when I get back home. As always thanks for all the informative Videos. Dale
You are the GOAT! had tunnels working but wouldn't update. set up app and it all linked in and working/updated.
I spent 2 days trying to get another method to work with reverse proxies, port forwarding and such. This had me up and at my end goal in minutes! THANK YOU!
So simple, and so well explained. Great job, thank you so much
worked amazing made two tunnels. One for audiobookshelf and one for overseerr. Thank you so much!
Can not be more clear than this video thanks a lot !!!!!
You can also add security to your tunnels by going to access and creating an application.
I whitelisted my WAN IP so when I'm home and try to access my server I don't have to enter a password but if I'm traveling when I try to access my server I need to authenticate
if you can create a video for that, it will be a great tool for protecting our web applications
How is it when I finally decide to pull the trigger on putting together the Cloudflare Tunnel setup and can't find any decent up-to-date walkthroughs, and you come out with this a day after I finally get it working! Haha. Thanks for the great video. Nice to know that I followed the same process and got it up and running. Additionally, I added Nginx Proxy Manager to my setup and have the tunnel pointed at that, though you can manage all of that in the Cloudflare interface now.
Great stuff. Can't wait for the immich video.
Easy, clear and simple. Thanks Ed. Will be setting up! Will also checkout the photo video as that may be very useful.
This is beautiful man. Thank you for doing such an amazing job!
Great video I think this works well for those who don't want to reverse proxy or can't. I reverse proxy my nextcloud instance. But this is a nice option to have.
This is just what I needed! Thank you
Definitely the easiest way to get a tunnel going on unRAID that I've seen and now, used. Thanks again @Spaceinvader One!
Everything you do is good work
This was exactly what i was looking for! thank you!
Thank you so much, I'm big fan this channel.make my unraid more and more useful,
Thank you!!! This video + Immich video's, I now can take control of my own photo cloud!
Brilliant. Thank you for sharing your time and expertise with us.
Quality stuff right here! Thank you so very very much!
Thanks a lot ! That was a walk through the park ! 🙂
Please do the video on the custom menu buttons soon! Very interested in learning more about custom unRAID integrations.
fantastic as always.
Great to see you back Ed, i’ve been waiting for some new videos! Would it be possible for you to do a up to date video of Plex meta Manager? I always have trouble getting it going so I just walk away from it :( Best regards, Mick
That took like 10 mins and my friends think I'm a genius. Thanks so much!
I agree with the Immich server in UNRAID, but the Nextcloud is being stubborn not allowing untrusted domain, and for the life of me, can't figure out how to setup up config.php file from UNRAID side
@@davidglavich4701 For some services that use port 80 and 443 like reverse proxies and DNS, I had to set up a new VM, then Docker and Docker Compose, and then add a macvlan with a /32 (single IP address) so that the service got it’s own IP and I could be sure there was a clear route and no conflicts with other ports being used on the host. It was a real pain in the bollocks.
Another timely video
OMG Soooo much easier than borking NPM every month or so. Wish I had this years ago hahaha. I love you!!!
Loving this!!!!
Great video! I would be interested in a video that has this stack (Headscale) Tailscale, Traefik, Authentik and CrowdSec. Thanks for everything you're doing. I have been a subscriber for 4+ years
i went away from trunnels since they became so kind of unusable slow - sadly. super easy to install and configure - very straight forward - hope the speed will come back. Great Video btw! Thank you!
What are you using now?
I use a tunnel for each of my servers, each one has 20+ subdomains configured, and I've never noticed them being slow. If you're sure it's the tunnel it might be worth looking at the configuration
@@Proactivity - crazy story! dont have that much tunnels, but like weeks ago i started getting only about maximum download rate of an app over a tunnel of only around 150kb/s .... when it should be around 30mbit. That was never a problem before - but even normal container apps become a pain in the A.. to use. Like Portainer - loading every site takes about 30 seconds over tunnel , without tunnel 1 second - same with homeassistant -> frigate stream is not viewable over tunnel (stuttering etc) without loads in 1-2 seconds
Never had the problems before, and not changed a thing about it. so i doubt its about any config.
Error is at home on my NAS Unraid - and on my Hosted Root server for client websites .... same "problem" with tunnels .... and that root server has 10g / 10g networking .... so speed should be better than 150-180kb/s :D
Reporting here from Germany - Maybe thats the problem :D
will try again tho since tunnels are very neat :)
Great video as always, great to see some new content from you. Have I missed the immich video? Can’t seem to find it.
Great tutorial
Thanks for this
Awesome video. Very easy to follow. Thank you!
Will you be doing a follow up video on how to add additional layers of security?
this!!!
THANKYOU !!!!! I melted my brain trying to do this for Ombi.... Note: Im running on truenas scale, the steps are the same thou.... Can now request media via Ombi anywhere in the world and the starrs stack places on my plex server....
Been waiting for that Immich video that was to come in 2 to 3 days. Not complaining. Just wanted to drop a line and say hope all is well.
Thank you!
Thx for this help
Great tutoria thanks
when i tried to set it up I already had the older method and a CNAME for every subdomain. i had to delete it. this seems much cleaner and easier
Great videos as usual @SpaceinvaderOne ... thank you. Can you give any tips on if/how I should move away from SWAG ... I used your videos on that which works well.
For your upcoming video on immich please cover adding more than one external library!
Thanks. I could never get my reverse proxy set up to work using one of your earlier videos no matter how many times I deleted it and started over. I always assumed I'd done something wrong, but if your comment about some ISPs is correct, maybe it's their fault.
Thanks!
ISP upgraded to fibre and behind CGNAT - this instantly solved my issue. Always, so clear and precise, easy to follow videos. Thanks a lot!
Great to hear!
Great Video. Just wondering though. which would be better? Tunnel or Reverse Proxy?
an interesting thing about this is that u can place the tunnel behind a OAuth for extra security
Do you have a tutorial for this ? Security is my biggest concern with this method
Awesome!!
Great vid, so easy to understand. Curious, why not just purchase your domain at Cloudflare and not deal with changing name servers?
Thanks.
Very useful! Are you going to do an Immich tutorial for unraid?
he literally starts the video by saying that video is about to come out and he wanted this posted first
excellent video. so this will work also if you have double nat router setup i suppose?
Nice!
Thanks
Thankyou so much
That is working great! Thank you so much for amazing video. Is there a way to restrict access to UK only? Otherwise anyone can access to domain.
Bedankt
Thankyou so much :)
Great video as always! I've tried this and I can't seem to get Authelia to work now. Would there be updated instructions for this to function with Cloudflared as opposed to using SWAG?
Great stuff, could you host a public website with this method or would there be SSL issues?
Great refresher video and was easy to set up! One question I have I how to use the same for a VMWare. In my use case I have Home Assistant deployed, meaning it has its own IP address. But following this guide I get a 400-error. Is this simple not possible and can it only route docker containers or does it require a specific setting?
Thank you Spaceinvader, any chance you could do a video on WireGuard tunnelling?
+1 for this! I got cloudflare tunnel working for my containers, but when I try to use it for wireguard I can't get it to work. It connects, but no data flows through.
This was really helpful, thanks. ISP recently started blocking my reverse proxy ports, causing me headaches for weeks, so this has gotten around that and my landing page is up and running again in less than 20 minutes.
I've used adding this as an excuse to add more services to my Unraid server that I've wanted to for a while. A few of them I'd like to keep behind some authentication.
Possible future video on adding something like Authelia, Keycloak or Authentik to an Unraid server using Cloudflare Tunnels? I've found other tutorials and videos on these apps are a little out of date and seem to skip steps (assuming you know something you don't). I've always found you've looked at setting things up from the perspective of a beginner by covering every step in detail, so I not only know HOW to do something, but WHY too. I think you could add some value here. Thanks again!
Thanks. I am glad you like the video. Have you tried Cloudflare Access policies. Its easier to use than Authelia etc. To quote from the cloudflare site "Protect your Self-Hosted, SaaS and Private applications with Zero Trust policies. Only users who match your policies will have access to your configured applications"
Yeah, it’s what I’m using now and it works well enough. I just wouldn’t mind having a proper login page I can put a username and password into rather than using an email whitelist and OTP.
Really great video as always. But one question: now thats a security problem ? Everybody can now try to logi in , right ? I really need something like that without vpn but i have concerns about security.
Can you set up mutual TLS with a client certificate on say a mobile device to further secure access to the tunnel to only authorized client devices? Thank you for the video!
Awesome!
My question is... if I were to connect to my Nextcloud, can I do large file transfers? like 1GB? or is Cloudflare Tunnel not for high data bandwidth things? If not, what other ways can I do?
Hello Spaceinvader one. Thank you for your valuable video. Can you tell me why I can't configure the tunel with pihole and unbound? Do I have to pay attention to anything special?
Would have been good to add some of the 2fa options to the video. Imo mandatory to be doing this as a first line of defence before opening up a login screen.
Please , make videos on AI softwares on unraid . It would be fun
Thnks sir ed for the tutorial but i heard the limitation in cf tunnel alloted in 100mb .. can you make a tutorial for tailscale and caddy reverse proxy .. more power
I already have cloudflared tunnel but I'm still watching 😁
Hey, thanks for watching. Much appreciated :)
@@SpaceinvaderOnewe’re just checking your work lol. Good stuff as usual!
I just setup some containers. It seems pretty cool for simple sites. Not sure how you can do something like a game server that requires multiple steam port to be open? Example enshrouded container, requires steam and game server ports.
I know this video works great for the majority of use cases, but is their an alternate method for domain hosts that will not allow us to change the host name server?
Cloudflare tunnel is a pretty great and easy way to set up remote access to my home network. However, Cloudflare does not have a CDN in my location, so the connection has to route to the UK, resulting in a very slow connection.
This video is very new and I see you replying to comments. I did a quick google search and it’s only in feature requests. How did you manage to add your multiple servers to the same GUI switching that easily to your nextcloud server? Is that only for a beta version of Unraid? Maybe you can post a video if it’s worth it on how to add them in? If it’s something super simple sorry. I was just shocked to see you click into your other server from the GUI.
Not sure what you're referring to? It looks like he just has browser tabs open just off the top of the screen recording and he's clicking a new tab to switch to something else. Barring that, you may be looking at the docker page in unraid? There are also a few different "homepage" type containers available that will allow you to put all your services at one URL.
Is this waht you are looking for? ua-cam.com/video/n01A6pTVexs/v-deo.html&ab_channel=SpaceinvaderOne
What changes to the Nextclound config files need to be made we are using a reverse proxy?
With a tunnel, instead of a reverse proxy, mean you need to install cloudflare tunnel on the system you want to see those self host services? Or it would work without issue like having a service with open ports on a reverse proxy?
how do you protect that tunnel?
can you connect it to CrowdSec?
how do you block known attackers?
Would be interesting!
I believe DBTech did a video on adding authorizing access to cloudflare tunnel
Was there a IMMICH tutorial video upcoming?
I have a couple of questions. Isn't there a privacy issue with proxying your traffic through Cloudflare as it decrypts and scans all traffic before onward communication to your server (needs to do this for IDS/IPS/anti-DDOS)? Also, many of my videos are waaaay over the 100Mb limit set by Cloudflare, won't this mean that large videos are never uploaded to Immich?
Could this be done in application to public ip? More so specfically for minecraft servers or game servers in general. I followed your Minecraft video so my minecraft server has an associated url with it, but still uses my *unmasked* public ip, is there a way to have unraid as a whole use a different address then my public ip?
Is this just as safe as a reverse proxy using NGINX? Would this be accessible outside my network? Like if I used for overseerr and gave to family/friends?
insane video , but how do you set that you have to enter a login / password ?
Is it safe to use a tunnel for Jellyfin or is that against their TOS? I've disabled caching for my subdomain but I'm not sure if I should still use a tunnel
so with the cloudflare tunnel container you don't need NGINX proxy manager?
How would this work for game servers? Can you still use the domain somehow? I don't think cloudflare wants you to stream that traffic through the tunnel
Strange situation with Nextcloud. Installed linux server repository Docker and setup tunnel as per this video (including enabling No TLS Verify) and am met with "Access through untrusted domain" splash when I go to Nextcloud tunnel location. Do I need to add a Trusted Domain by editing the config.php file or have I set up the docker/tunnel incorrectly?
Not entirely related but....
Do you have, or can (and when) you do one, on specifying an IP on Unraid dockers? Since the "new" versions (I'm on 6.10) apparently need you to change from MAC VLAN to IP VLAN, I don't care about external access, I'm just looking for internal networking. Mainly I have the arrs, plex, jellyfin, adguard, etc.... adguard, I think, is the only one that has built in IP specification in the docker setup screen.
with nextcloud i get an untrusted domain error, i dont know how to add a trusted domain thru terminal with unraid, any help would be great thanks.
Great tutoria, unfortunately the TLS options is absent for me. Maybe they moved it
Cloudflare offers the cheapest domains (no markup) at lease in the US
Yep, I picked up a Doman for $9 a year. Have seen them as low as $4
I realized this a little too late, and I'm still a few months away from being able to move my site over.
I used to use google and when I setup a gre tunnel with cf I realized they could save me a few bucks so I figured wth. Moved over and have been happy ever since.
I just transferred my domain from GoDaddy to cloudflare registrar. Half the price. GoDaddy wanted 20$ to renew, CF only 9,99$
Did some manage to get unraid itself accessible throught the tunnel?
Do we still need to do port forwarding on xfinity? I wouldn't think so but I was trying to go to 8443 that goes to my mineos page and I get a 502 bad gateway with cloudflare.
I have the same problem, I can strangely access Sabnzbd and my router via tunnel but nothing else as it always resolves to 502 bad gateway, did you resolve this issue?
will this work for valtwarden? my curreent ISP has me double NATTED my certs need to be re done but i can't :(
I went through the setup but got stuck at one point. Anyway, I removed everything but now I'm clearly missing something because my server is no longer accessible outside my network - any ideas of what I might have forgotten to rollback?
I think Cloudflared has had an update & will no longer be able to create new tunnels until the container is updated. My existing ones still work, but can't add a new one for now.
My unraid server only runs Plex and emby plus radarr,sonar etc I can access remotely using unraid connect via port 443. Do I really need for worry about ransomware and attacks? I got a few ports open for those apps. I have no personal files on the server only movies and tv shows.
I like to keep as few open ports as possible. Plex and emby are okay i would say using the forwarded ports. But sonarr and radarr i would not have them publicly facing. You could use tailscale and access those that way (and your Unraid server) very securely. Check the channel next week for some videos on tailscale and reverse proxies etc
@@SpaceinvaderOne Thanks, I appreciate the feedback mate still new at this. Look forward to those new videos on accessing server remotely via your recommendations above.
On cloudflare, you can use the container name instead of IP :)
yes you can (well I am 99% sure you can) you would have to have the containers (the tunnel container and ones you want to proxy) on a custom network (ie docker network create proxynet) Then make sure to use the internal port not the mapped external. So immich container would be immich:8080
@@SpaceinvaderOne it's working 100% i use it :)