Step-by-Step Guide: Installing Cloudflare Tunnels on Proxmox

Поділитися
Вставка
  • Опубліковано 27 сер 2024

КОМЕНТАРІ • 107

  • @goodcitizen4587
    @goodcitizen4587 День тому +1

    Really cool, thanks!

  • @EddieArgenals
    @EddieArgenals 5 місяців тому +2

    Thanks man! Straight to the point like always. Quick reminder for those having issues accessing services using port 443 or https. Make sure you switch on the No TLS Verify in located in the additional applications settings at the bottom of the cloudflare tunnel set up page

    • @bigbeartechworld
      @bigbeartechworld  5 місяців тому

      You're welcome, and thanks for watching! Good tip!
      If you have any video suggestions, please let me know here: community.bigbeartechworld.com/c/bigbearyoutube/bbyt-suggestions/7

    • @cxristobal
      @cxristobal 4 місяці тому

      Hi. I'm getting "This combination of host and port requires TLS." but I can't find the No TLS Verify switch. Any idea?
      Thanks!

    • @bukitsorrento
      @bukitsorrento 4 місяці тому

      @@cxristobal you have to switch https first then the no tls switch will appear

  • @CC-zr6fp
    @CC-zr6fp 2 місяці тому +2

    Love watching your vids! HOURS of searching the interweebs to figure out why Proxmox wasn't handing out IPs thus causing this to fail when creating. I am running it using Hyper-V (yes yes I know, but its easier for me to tinker without dedicating an entire system to it). So if anyone else runs into this issue and gets stuck at that step of trying to connect to the network, you have to stop the VM and select it > Settings > Network Adapter and select the + on the left and enable MAC spoofing, Restart the vm with Proxmox and run the script again.

    • @bigbeartechworld
      @bigbeartechworld  2 місяці тому

      Awesome to hear, Thank you for watching! I'm glad to have you here! It would be cool if you joined the community forum and wrote a post on tips and tricks that you find helpful. It might help other people too! :) community.bigbeartechworld.com/

  • @zeldaboch
    @zeldaboch Місяць тому

    Thanks a lot, your video solved me an unanderstanding problem

  • @donpetties1817
    @donpetties1817 9 місяців тому +1

    Thank you so much for your content. It has been extremely helpful on my self-hosting journey.

    • @bigbeartechworld
      @bigbeartechworld  9 місяців тому +1

      You're welcome! I'm thrilled to assist you on your exciting journey into self-hosting!

  • @philliii
    @philliii 7 місяців тому

    This is exactly what I was looking for. Thanks mate for well explained helpful video. Sorted me right out 👍

    • @bigbeartechworld
      @bigbeartechworld  7 місяців тому

      Awesome! Glad my video was able to help! You're welcome. Stay tuned for more! Don't forget to join the BigBearCommunity if you have a chance: community.bigbeartechworld.com/

  • @kristof9497
    @kristof9497 4 місяці тому +1

    Thanks, very useful.

    • @bigbeartechworld
      @bigbeartechworld  4 місяці тому

      You're welcome, and I'm glad that the video could help!
      Feel free to suggest video ideas: community.bigbeartechworld.com/c/bigbearyoutube/bbyt-suggestions/7

  • @freeworld848
    @freeworld848 Рік тому +1

    Thank you for the instructions, very much appreciated. Just subscribed to learn more from you.
    I have a question though; if I open a single port through my firewall to a specific app in my home network, I would be getting the same result. So, what advantages the cloudflare tunnel has over the other way?
    Also, how do we protect the app webUI with the password screen for bruteforce attack etc?
    Thanks again
    EDIT: Oh, never mind please. I just watched your follow-up video* and you answered exactly what I was looking for. You are amazing dude, I am so happy to find your channel. All your videos about is what I am working/learning now as a hobby.

    • @bigbeartechworld
      @bigbeartechworld  Рік тому +1

      You're welcome! I'm glad I'm able to help you! I was going to say I made a video on protecting the tunnels. Thank you, man, means allot! Let me know if you have any video suggestions! Join the Big Bear Community if you haven't already! bit.ly/bbtw-community

  • @Stinosko
    @Stinosko Рік тому +2

    Are you planning to make a follow-up video to secure a service behind a third party login page like google or Github account? Useful for application that don't provide a login page themself or as an extra layer of security🙂

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      Thanks for the suggestion! Put it on my to-do list! I'll work on it soon! I use identity to protect my apps that even have auth just to have MFA. Don't forget to join the Big Bear Community! bit.ly/bbtw-community

    • @bigbeartechworld
      @bigbeartechworld  Рік тому +1

      Published the video: ua-cam.com/video/V2AWPL9GaMg/v-deo.html Thank you for the suggestion! Let me know if you have any more!

  • @nicholasbickhart24
    @nicholasbickhart24 2 місяці тому

    I am using the default port of 8006 on my Proxmox server and the tunnel shows healthy. I tried my Proxmox IP:8006 with HTTP and https. I disabled tls verify and chunk encoding. I get a bad gateway 502 and cannot figure out what is wrong. Anyone have any ideas?

  • @lacee82
    @lacee82 10 місяців тому +2

    How to create a second tunnel to connect another proxmox container? E.g. I followed your video and created tunnel for Pi-hole, works well. Now I want to have the same for my Home Assistant container. I started to create a new tunnel, copy the code into proxmox/cloudflared console, but that gives error. Please help.

    • @bigbeartechworld
      @bigbeartechworld  10 місяців тому +1

      You need to create more public hostnames, not create more tunnels or Cloudflared services.

  • @frankennstein
    @frankennstein Рік тому +3

    Great tutorial! I managed to install the Cloudflare service following the same steps. I am trying to access my home network from outside, in the tunnel configuration I created the host name for portainer pointing out the local IP address and the port, and everything works great. When I try to setup a new hostname for Proxmox webUI I am getting a 502 error. The settings are pretty much the same, I've just changed the prefix for the URL, the IP address and the port. I am accessing Proxmox via https on the default port 8006. Do I need a firewall rules to be able to access the webUI or it is something else?
    EDIT: I managed to fix it on my own, the solution was in front of my eyes. When I chose HTTPS as service type, I had to check "No TLS Verify" in the below's options under TLS. I suppose that's because I don't have SSL certificate installed on my proxmox server, I need to skip the verification.

    • @bigbeartechworld
      @bigbeartechworld  Рік тому +1

      Thank you! I'm trying to create step-by-step videos where people can actually learn! Ya, I was going to say the self-signed certificate is not passing verification. Let me know if you have any video suggestions! Also join the BigBearCommunity at bit.ly/bbtw-community.

    • @EddieArgenals
      @EddieArgenals 5 місяців тому

      Sorry, posted solution in my comment above. Make sure you switch on the No TLS Verify located in the additional applications settings at the bottom of the cloudflare tunnel set up page. That will make it work.

  • @my-king
    @my-king 4 місяці тому +1

    I have a question. I am trying to link to my proxmox login. Am I able to do this if I am using cloudflare on the proxmox? I tried but it isnt working so I guess not. If not, how do I do this?

    • @bigbeartechworld
      @bigbeartechworld  4 місяці тому +1

      Did you enable "No TLS Verify" in "Additional application settings" > "TLS" and also set "Type" to https and the ip and port like you get to it in the browser? If you have anymore questions, feel free to start a post on: community.bigbeartechworld.com/

    • @my-king
      @my-king 4 місяці тому +2

      @@bigbeartechworld Oh thank you so much. That was the issue. I will also join.

  • @grumetenavegando
    @grumetenavegando Рік тому +2

    Tio, eres cojonudo. Gracias. (trnaslate my commentary) jaja

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      ¡Gracias hombre! ¡Me alegro de que te gusten mis vídeos!

  • @tahaali4230
    @tahaali4230 4 місяці тому

    the status of the tunnel is keep switching from down to healthy and it is unstable , and the issue is not with my internet cause i have another tunnel installed on ubuntu server working fine on the same network

    • @bigbeartechworld
      @bigbeartechworld  4 місяці тому

      Can you check the logs: journalctl -u cloudflared
      It's hard to follow up on the comments, so if you would please post in the BigBearCommunity forum with more information on what your issue is, that would be great.
      Please post in the community.bigbeartechworld.com with your issue. Try to be detailed in your issue. This is so I can keep track of your issue.

  • @jsalinastls
    @jsalinastls 2 місяці тому

    Thank yo so much. How about routing between 2 networks ?

    • @bigbeartechworld
      @bigbeartechworld  Місяць тому

      You’re welcome! Have you tried adding a cloudflared service to each network?

  • @yrjokalevi
    @yrjokalevi 4 місяці тому +1

    Hi thanks a lot for the tutorial! I'm new to the proxmox and self hosting in general and I still try my best to figure out how all this stuff works.
    Is it wise in terms of security to have a Bitnami VM running a website hosting and create a Cloudflared tunnel in LXC that points to the VM's local IP? I managed to make it up and running but I'm still wondering if this is the best practice. Btw I intend to make the website publicly available. If this is a good practise and I want to create another website in new VM, should I create another Cloudflare tunnel with LXC or use the same for both websites?

    • @bigbeartechworld
      @bigbeartechworld  3 місяці тому +1

      Hello and welcome to the world of self-hosting!
      Yes, your approach is sound. For hosting another website on a different VM, you can simply create a second public hostname in Cloudflare. You also have the option to set up multiple Cloudflared connectors. This setup can provide redundancy; if one connector experiences issues, the others can take over to ensure continued availability of your services. Just make sure each hostname correctly points to its respective service, and configure your Cloudflare tunnel to handle traffic accordingly.
      Feel free to start a post on: community.bigbeartechworld.com if you have more questions!

    • @yrjokalevi
      @yrjokalevi 3 місяці тому

      @@bigbeartechworld Thanks a lot!

  • @amandacandies7424
    @amandacandies7424 Рік тому +1

    I have a question: If i want to set up a tunnel to access the proxmox Web GUI, when setting up the host name does the URL need to be the IP for the Proxmox site? It looks like you used the one for adguard because once you tunneled in it took you to adguard site and not the Proxmox GUI. Thanks for your help!

    • @bigbeartechworld
      @bigbeartechworld  Рік тому +1

      Yes, it does need to have the IP and port of the Proxmox UI. If you have any more questions, feel free to ask!

    • @wecharg
      @wecharg 9 місяців тому

      hmm when I tried the ip of my main node it just goes to a blank white page@@bigbeartechworld

    • @bigbeartechworld
      @bigbeartechworld  8 місяців тому

      @wecharg It's hard to find replies on the UA-cam filters so Please post in the community.bigbeartechworld.com with your issue. Try to be detailed in your issue. This is so I can keep track of your issue.

  • @Robbobacon
    @Robbobacon 3 місяці тому

    The tunnel shows connected in Cloudflare, I create the url but it doesn't connect to my proxmox server. I have removed the SSL on cloudflare but anything I need to do please?

    • @bigbeartechworld
      @bigbeartechworld  3 місяці тому +2

      Did you turn on: Additional application settings > TLS > No TLS Verify.
      Also, make sure the service is exactly how you get to it on the browser.
      If you have more questions feel free to ask here: community.bigbeartechworld.com/

    • @Robbobacon
      @Robbobacon 3 місяці тому

      @@bigbeartechworld brilliant. Works thanks. Doesn’t work in chrome though only safari 😂

    • @Robbobacon
      @Robbobacon 3 місяці тому

      @@bigbeartechworld done that and got an error when logging in “Connection error 401: Unauthorized”

  • @andersonong4404
    @andersonong4404 10 місяців тому +1

    Hi, I follow the step & I couldn't get the Connector at Cloudflare page... may I know why? Thanks for advance if answering it..

    • @bigbeartechworld
      @bigbeartechworld  10 місяців тому

      Can you explain couldn't get Connector? Are you receiving any errors? Are you sure you followed all the video and didn't skip? It's sometimes better to start over and try again. I would need more info before I could help you.

    • @andersonong4404
      @andersonong4404 8 місяців тому

      Hi, Sorry for late respond. Sorry for miss-leading, Connecter ID @ video 5:58 I couldn't get it.. but I successful to visit from outside😊. Only one problem is I have install pingvin, ngm, docker container, & Home assistant in Proxmox as well. All the rest of container I can visit from outside by using CF zero trust tunnel and the only fail to visit is Home assistant. Do you know why?😅 thanks again.🫡🫡

    • @bigbeartechworld
      @bigbeartechworld  8 місяців тому

      @@andersonong4404 Could you start a forum post on the BigBearCommunity? community.bigbeartechworld.com/

    • @KrisHoobergs
      @KrisHoobergs 8 місяців тому

      I have the same problem (video 5:58) no connectors so no idea and could not proceed, is there a solution for that?

  • @kirkkork
    @kirkkork 6 місяців тому

    Thank you for the tutorial!
    Is it better to have a VM for each or all cloudflared tunnels or have a VM with docker image(s) for cloudflared internally?
    Are there performance, power or security concerns with either approach?

    • @bigbeartechworld
      @bigbeartechworld  6 місяців тому +1

      You're welcome, and I'm glad you like the tutorial. I'm going to try to explain the pros and cons of your question. Choosing between separate LXCs for each Cloudflare tunnel and a single LXC with Docker containers really depends on what you're looking for in terms of performance, security, and manageability. Here's a quick breakdown:
      ** Separate LXCs for each tunnel: **
      ✅ Pros:
      Better isolation, enhancing security.
      Easier troubleshooting and maintenance for each tunnel.
      Allows for individual performance optimization.
      ❌ Cons:
      Higher resource consumption is due to OS-level overhead in each LXC.
      It is more complex to manage multiple containers.
      ** Single LXC with Docker Containers: **
      ✅ Pros:
      More efficient in terms of resource usage, potentially saving power.
      Simplifies management with Docker's deployment and scaling tools.
      Docker containers are highly portable.
      ❌ Cons:
      Security risks if one container is compromised due to a shared kernel.
      Possible resource contention among containers.
      Key Considerations:
      🚀 Performance: Might not significantly differ for most use cases, though Docker can be slightly more resource-efficient.
      🔋 Power Usage: Docker has an edge in efficiency, useful if running many instances.
      🔒 Security: LXCs offer better isolation, which might be crucial depending on your security needs.
      Your choice should align with your priorities. If you value security and are managing fewer tunnels, separate LXCs could be the way to go. For efficiency and ease of management, especially with multiple tunnels, a Docker-based setup in a single LXC might serve you better. Always follow best practices.

  • @felipemarquesweb
    @felipemarquesweb 6 місяців тому

    this is not works for me at proxmox 7.4-3, why?

    • @bigbeartechworld
      @bigbeartechworld  5 місяців тому

      If you need help, feel free to start a post on community.bigbeartechworld.com/ so I can follow up.

  • @martinw7366
    @martinw7366 Рік тому +1

    Hey there,
    I have two tunnels with two indiviual Home Assistant VMs on my Proxmox and it works fine.
    But I also would like to have remote access to the Proxmox UI.
    Do you know how to set this up?
    I did it the same way but it doesn't work.
    Cloudflare shows a "healthy" connection, but when I open my domain i receive a "Bad gateway Error Code 502"
    Any idea what could be wrong?

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      Hello. It sounds like an SSL issue.
      In Cloudflare, you would need to go to your domain and change the SSL option.
      [YOUR DOMAIN] > SSL/TLS > Change to Full.
      If this doesn't fix it, let me know.

  • @BrazenNL
    @BrazenNL 4 місяці тому

    Can I use this from another container? I'd like to tunnel Pi-hole's upstream DNS request (in a different container) to Cloudflare's resolvers via a tunnel.

    • @bigbeartechworld
      @bigbeartechworld  3 місяці тому +1

      As long as it's on the same network and they both can access each other on the LAN, it should work.

    • @BrazenNL
      @BrazenNL 3 місяці тому

      @@bigbeartechworld Thanks.

  • @saltierthanyou69
    @saltierthanyou69 5 місяців тому

    What exactly is the benefit of this? Couldn't I just use something like Nginx Proxy Manager and have the same results?

    • @bigbeartechworld
      @bigbeartechworld  5 місяців тому

      The benefit is not having to poke holes in your firewall, and it's easier to setup for people.

  • @JJdeRamos5360
    @JJdeRamos5360 4 місяці тому

    Thanks for this great explanation !!!. Quick question. Have Cloudflare internal add-on in HomeAssistant (in Proxmox) and would like to replace with this external configuration also in Proxmox. Should I remove add on in HA or any other configuration is required? Thanks

    • @bigbeartechworld
      @bigbeartechworld  4 місяці тому

      You don't have to remove anything; you can have multiple cloudflared connectors running.
      If you have more questions, feel free to start a post on: community.bigbeartechworld.com
      Here is more info: developers.cloudflare.com/cloudflare-one/connections/connect-networks/deploy-tunnels/deploy-cloudflared-replicas/

  • @cicievie
    @cicievie Рік тому +1

    hello , is it possible to use dns over tls with cloudflare tunnel?? do i need to add new public hostname for dns over tls??

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      Hello, if you're wondering how to get DNS setup on Zero Trust, I'm planning on making a video for it! I'll let you know when the video is up.

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      I made a video for your comment: ua-cam.com/video/7X8JBRNkgUo/v-deo.html Thank you for the suggestion!

  • @sidneyking11
    @sidneyking11 Рік тому +1

    what are you using to see what the script does? CT somthing,..

    • @bigbeartechworld
      @bigbeartechworld  Рік тому +1

      That's GitHub File Search just click on a file then it should have a search bar like the video on the left. The ct directory is used to update the lxc and the install is what you are using to install the lxc. Let me know if you have any more questions!

  • @artnation6612
    @artnation6612 6 місяців тому

    Hey, that tutorial was super helpful! I've got a question: if I've got an Ubuntu server VM running CloudPanel, how do I go about tunneling applications that are on the CloudPanel? Your answer would be a lifesaver, thanks!

    • @bigbeartechworld
      @bigbeartechworld  5 місяців тому

      I've not used CloudPanel, but if it's got a LAN IP, then you can create a public hostname for it.
      If you have any further questions, please post them at community.bigbeartechworld.com with your issue. Try to be detailed in your issue. This is so I can keep track of your issue.

  • @mishanwarnakulasuriya1346
    @mishanwarnakulasuriya1346 6 місяців тому

    @BigBearTechWorld whats the defult creds for the Coloudflared container ? Its asking me to sign in and I cant.

    • @bigbeartechworld
      @bigbeartechworld  5 місяців тому

      The default install normally has an automatic login without credentials. Are you trying to sign in to the LXC?
      Please post in the community.bigbeartechworld.com with your issue. Try to be detailed in your issue. This is so I can keep track of your issue.

  • @AndreBarbosaPC
    @AndreBarbosaPC 10 місяців тому

    Thank you for the tut. But as of today, this procedure doesn't work anymore.

    • @bigbeartechworld
      @bigbeartechworld  10 місяців тому

      You're welcome. Could you explain what doesn't work so I can put it on my to-do list to update?

  • @Dorkasoris07
    @Dorkasoris07 9 місяців тому

    I appreciate your video's! However, I'm having a issue with when I paste the code from github and push enter, nothing happens. Just new line appears. Have any ideas?

    • @bigbeartechworld
      @bigbeartechworld  9 місяців тому +1

      Thank you! I appreciate you watching! Could you post in the Big Bear Community so I can follow along and help better? community.bigbeartechworld.com/c/bigbearyoutube/5

  • @coribee3799
    @coribee3799 7 місяців тому

    hier can i tunnel direct to my pve?😢

    • @bigbeartechworld
      @bigbeartechworld  7 місяців тому

      Please post in the community.bigbeartechworld.com/c/bigbearyoutube/5 with your issue. Try to be detailed in your issue. It's hard to keep up with the comments on UA-cam.

  • @DanielePuglisi
    @DanielePuglisi Рік тому

    hi, how are the login credencial fot container cloudfared login ?

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      Could you explain the issue more and what step you're on?

  • @harishapc2214
    @harishapc2214 Рік тому

    Hey, i installed proxmox and in proxmox created vm and installed ubuntu destop in vm, in ubuntu installed aapanel for webhosting, isseue is my internet provider is not allow the port forwarding so i installed nginx reverse proxy to connect domain and pointing to public ip of router provided but its not shows my website when i navigate to my internal aapanel ip to nginx and domain a record will show in same machine not over internet is there any solution for this? Or can you make simple video for this.
    Thank you

    • @harishapc2214
      @harishapc2214 Рік тому

      I think We can in cloudflare tunnel but its asks cc for register is there any opensource?

    • @bigbeartechworld
      @bigbeartechworld  Рік тому +1

      If you can't port forward, then you would need to go with Cloudflare Tunnels, Twingate, or Tailscale to remotely access your home lab.
      I made a Playlist for Remote Access: ua-cam.com/play/PL2RAscIdkpt-n6_Xb0iYrHDqRqUNfHwf0.html
      Working on making tutorials for Tailscale.

    • @harishapc2214
      @harishapc2214 Рік тому +1

      @@bigbeartechworld sounds good let me check. Thank you.

  • @curby0911
    @curby0911 7 місяців тому

    just install cloudflare using the proxmos helper script - what is the default login username and password?

    • @curby0911
      @curby0911 7 місяців тому

      After copying the script and pasting it in the proxmos node- and the container is created when you in the container it asked you for a username login and password

    • @bigbeartechworld
      @bigbeartechworld  7 місяців тому

      Could you explain what you're doing in the terminal for the lxc container to ask for a username and password? I haven't needed a username and password to just go into the console for the Cloudflared LXC container.

    • @curby0911
      @curby0911 7 місяців тому

      @@bigbeartechworld the method you gave after launching the container its asking for cloudflare login. i am using my cloudflare login and its not working

    • @curby0911
      @curby0911 7 місяців тому

      found a way around it - from the node i just run - pct enter VMID - that allows access to root of container

  • @HeatherFordAtQuibical
    @HeatherFordAtQuibical 9 місяців тому

    What web browser are you using?

  • @user-or8ft7fp1d
    @user-or8ft7fp1d 9 місяців тому

    whats the username and password for the cloudflare LTC

    • @bigbeartechworld
      @bigbeartechworld  9 місяців тому

      Hello, I don't have access to your Cloudflare username and password, as you would need to create your own account. If you have any further questions, please feel free to ask them on the BigBearCommunity platform at community.bigbeartechworld.com.

  • @ofchaot
    @ofchaot Рік тому +1

    doing it exactly like you, not reachable...

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      Could you give me more detail on what step you're on and what's not reachable?

    • @ofchaot
      @ofchaot Рік тому +1

      @@bigbeartechworld i fixed it, very nice Tutorial thank you! There was something wrong with my tls settings

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      ​ @ofchaot Oh cool, glad you got it working. It sounds like your SSL settings were set to Flexible or Strict and not full?

    • @ofchaot
      @ofchaot Рік тому +2

      @@bigbeartechworld its set to flexible but i made the change to Check TLS Verify option and change it to https... That solved it for me

    • @yanvictor1333
      @yanvictor1333 9 місяців тому

      thanks, your comment helped at lot here, i made same changes, it's working pretty well now@@ofchaot

  • @janwroblewski8183
    @janwroblewski8183 Рік тому

    Error 502, why?

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      Could you explain more about the error and where you’re seeing it?

    • @janwroblewski8183
      @janwroblewski8183 Рік тому

      When I enter the website I get the error.

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      @@janwroblewski8183 could you tell me which website? Is it Cloudflare?
      Do you have any DNS blocking or blockers on? Have you tried clearing your cache on your browser? Try to go incognito just to rule things out.

    • @bigbeartechworld
      @bigbeartechworld  Рік тому

      If you're talking about the custom tunnel that you created, Are you sure your Public Hostname is correct? How do you access the IP from your browser with https or http? What app or service is on the ip? Are you sure it doesn't have http proxy settings like Home Assistant needs to allow the cloudflare in?

    • @janwroblewski8183
      @janwroblewski8183 Рік тому

      Just to be sure. That method will give me access to Proxmox server it’s self? Just like I would access it from browser locally?