this post was submitted on 28 Oct 2025
73 points (98.7% liked)
Privacy
42996 readers
341 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 6 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I too am using a Cloudflare tunnel for my public facing services (such as WordPress), and that also allows you to put the WP login page behind another auth login as well which is great for security, so I do also vouch for Cloudflare.
I'm using Pangolin for private services on a VPS.
Plus, I have one service that is direct to my home IP for file sharing to one particular remote IP that is the only service directly through my firewall.
Therefore I have 3 ways my services are accessed and this has been the game changer for me recently, as previously I tried to run all this through one Caddy reverse proxy directly to my router and it gets painfully fragile mixing public/private services through one bottleneck when you're tinkering as a selfhoster. So splitting it up has helped massively.
Good tip with the Cloudflare alts though!
Doesn't cloudflare think you're a bot when you remove tracking portions of urls? Cloudflare prevents me from seeing sites, but I am not a bot. Maybe the answer is I shouldn't go to shitty sites to begin with.
You might have to unpack that for me as the caffine and morning meds haven't quite yet soaked in and I'm not up to operating temps yet. Are you talking about Cloudflare verification checks? Like, you click to a site, it asks you to verify if you are a bot or not? If so, with the Cloudflare Tunnel/ZeroTrust, no it doesn't ask for verification. Now, in the options for the Cloudflare/ZeroTrust tunnel, there is a section where you can set that up, but out of the box, you don't get verification checks.
Full disclosure, it took me a few tries to wrap this noodle around it. That's usually par for the course tho. Some things just stump me for some reason. Caddy was like that until I kept pursuing it seriously. Then one day I read a tut online and lifted one paragraph that was essential, and ding! The lights came on, the clouds separated, and it was so clear. Now, to me, Caddy is very easy and I am embarrassed that it took me so long. But, that's part of the journey.
Yeah, Caddy was working fine, but the issue was me tinkering with it meant having to reload Caddy for the updated config to work, and that would break any connections people were using for file transfers etc. Also, it isn't as quick for reverse proxying file transfers.
Therefore trying to run private and public services through it was limiting when I was also trying to tweak it constantly for my homelab.
I've found Traefik to be better in that it auto reloads the config live as you edit it, and it's been faster for file transfers on my 1Gbps fibre.
And now I've split my services to separate public/private reverse proxies, that takes the pressure of having to keep one proxy always live. Pangolin uses Traefik, and so do I for my direct services through my firewall, and that makes life easier when only dealing with one type of proxy service.
Messed around with it a bit. It's another one of those things I have to do and fail at a few times which is why I have a little cheap VPS to test on.