17 ms·

This is very cool, but you should not use Cloudflare Tunnels to stream media. This is forbidden by their terms of service (or at the very least not the intended

This is very cool, but you should not use Cloudflare Tunnels to stream media. This is forbidden by their terms of service (or at the very least not the intended use of Tunnels and they may disable your service). Use Wireguard or Tailscale instead. https://www.xda-developers.com/cloudflare-tunnels-are-great-but-never-use-them-for-media-streaming/ https://www.xda-developers.com/cloudflare-tunnels-are-great-...

ZeWaka 5mo ago
Yep, I rent a $5 VPS in my region that I tailscale to for exactly that reason, as well as to un-CGNAT myself. For an easy GUI solution for the latter, highly recommend Nginx Proxy Manager.
watermelon0 5mo ago
Cloudflare Tunnel publicly exposes your services, whereas Wireguard/Tailscale are VPNs. Tailscale (but not Headscale) offers Funnel, which is a reverse proxy, but you cannot use it with your own domain. Pangolin is the closest alternative to CF Tunnel, but self-hosted NetBird with reverse proxy functionality can also be used.
- oynqr 5mo ago
  The intersection of people who can self host headscale or netbird and those who can not set up their own reverse proxy is probably the empty set.
antihero 5mo ago
Can tailscale funnel do custom domains yet? Personally I'm switching to rathole+traefik, weirdly something I was researching and experimenting with in the early hours of this morning (I have now not slept and have to go to work).
- ffsm8 5mo ago
  Haven't used it like that myself, but stumbled upon this last year https://tailscale.com/docs/concepts/domain-ownership https://tailscale.com/docs/concepts/domain-ownership This let's you use your own domain for your tailnet, isn't the funnel but - but isn't it even better? Unless you actually want a publicly routable domain name, then you're back some hosted ingress I guess
jasonfrost 5mo ago
IIRC CF terms were about caching media not streaming media
- AdrienPoupa 5mo ago
  Since https://blog.cloudflare.com/updated-tos https://blog.cloudflare.com/updated-tos it is not completely clear if you disable Cloudflare's cache indeed. Still the terms are unclear enough that they could cut you out, and I'd feel uneasy exposing a Jellyfin instance publicly, but that's just me :)

ZeWaka 5mo ago

Yep, I rent a $5 VPS in my region that I tailscale to for exactly that reason, as well as to un-CGNAT myself. For an easy GUI solution for the latter, highly recommend Nginx Proxy Manager.

watermelon0 5mo ago

Cloudflare Tunnel publicly exposes your services, whereas Wireguard/Tailscale are VPNs. Tailscale (but not Headscale) offers Funnel, which is a reverse proxy, but you cannot use it with your own domain. Pangolin is the closest alternative to CF Tunnel, but self-hosted NetBird with reverse proxy functionality can also be used.

oynqr 5mo ago
The intersection of people who can self host headscale or netbird and those who can not set up their own reverse proxy is probably the empty set.

antihero 5mo ago

Can tailscale funnel do custom domains yet? Personally I'm switching to rathole+traefik, weirdly something I was researching and experimenting with in the early hours of this morning (I have now not slept and have to go to work).

ffsm8 5mo ago
Haven't used it like that myself, but stumbled upon this last year https://tailscale.com/docs/concepts/domain-ownership https://tailscale.com/docs/concepts/domain-ownership This let's you use your own domain for your tailnet, isn't the funnel but - but isn't it even better? Unless you actually want a publicly routable domain name, then you're back some hosted ingress I guess

jasonfrost 5mo ago

IIRC CF terms were about caching media not streaming media

AdrienPoupa 5mo ago
Since https://blog.cloudflare.com/updated-tos https://blog.cloudflare.com/updated-tos it is not completely clear if you disable Cloudflare's cache indeed. Still the terms are unclear enough that they could cut you out, and I'd feel uneasy exposing a Jellyfin instance publicly, but that's just me :)