Homelab HavenRemote access
Cloudflare Tunnel vs. Tailscale: Which One Should Guard Your Homelab?
They solve different problems that sound the same. Cloudflare Tunnel publishes an app to the internet without opening a port; Tailscale puts your own devices on one private network. Here's the real difference, and the hybrid I actually run.
June 15, 20265 min read
Cloudflare Tunnel with Docker: Publish an App Without Opening a Port
cloudflared makes an outbound-only connection to Cloudflare's edge, and Caddy reverse-proxies your apps behind it with automatic TLS — the exact compose files, and the DNS challenge trap that silently blocks new certificates.
June 22, 20265 min read
Tailscale with Docker: Reach Your Apps Without Any Public Exposure
Tailscale runs once per host, not once per container — every app on that host becomes reachable through one private mesh IP. Here's the setup, the DNS trap that breaks it in one specific case, and when a per-container sidecar actually earns its keep.
June 29, 20269 min read