#reverse tunnel
34 related articles
·3 min
Security Analysis of Authentik with Port Forwarding: A Self-Hosted Service Protection Guide
In-depth analysis of Authentik security with port forwarding for self-hosted services, covering NPM reverse proxy architecture, risks, and hardening with CrowdSec, MFA, VPN, and defense in depth.
Read more →
·3 min
ngrok AI Gateway: One Private Gateway to Rule All AI Models
Deep dive into how ngrok AI Gateway manages OpenAI, Anthropic, and self-hosted models through unified keys and entry points, delivering observability, access control, and fallbacks for production AI.
Read more →
·3 min
Practical Guide to Self-Hosted Security Architecture with Tailscale + Caddy + Authelia
Deep dive into the Tailscale + Caddy + Authelia self-hosted security architecture: traffic flow analysis, design strengths, and common pitfalls for building secure multi-server setups.
Read more →
·4 min
Guide to Securely Exposing Self-Hosted Services: From Tailscale to Defense in Depth
Complete guide to securely exposing self-hosted services: Tailscale zero-exposure, reverse proxy setup, Cloudflare Tunnel, Authelia auth gateway, server hardening, and 3-2-1 backup strategy.
Read more →
·4 min
Multi-Purpose Home Server Build Guide: Streaming + AI Inference + App Hosting on One Machine
How to build a $500 multi-purpose home server for Jellyfin streaming, Ollama local AI inference, web app hosting, and Pi-hole ad blocking with dual RTX 3060 GPUs.
Read more →
·2 min
Cogpit: A Self-Hosted Web Monitoring Console for Remote AI Coding Agents
Cogpit is an open-source self-hosted Web UI for remote Claude Code and Codex AI coding agents. Monitor in real time, manage multiple machines, and respond to permissions without SSH.
Read more →
·3 min
Acoustic Attacks: How Speakers Can Covertly Hack Computers Without Physical Contact
Deep dive into Pwnd Blaster acoustic attack principles: how speakers and microphones create covert channels to bypass air-gapped systems. Covers attack chain analysis, real-world constraints, and defenses.
Read more →
·6 min
Separate Domains vs. Subdomains for Self-Hosted Services? A Deep Dive into Security Isolation Strategies
Deep dive into domain security architecture for self-hosted services: Should services with different exposure levels use separate domains or subdomains? Analysis of subdomain enumeration risks, defense in depth, and practical isolation strategies.
Read more →
·3 min
Self-Hosted Ticketing Systems: Turning Family Tech Support into a Streamlined Service
Explore how to manage family IT support with a self-hosted ticketing system. Compares osTicket, Zammad, FreeScout and more, with Docker deployment tips and UX advice.
Read more →
·6 min
Securely Exposing Self-Hosted Services via VPS: Architecture & Practical Guide
Learn how to securely expose self-hosted services via VPS using WireGuard tunnels, Pangolin, and reverse proxies — enabling client-free access to Plex, Immich, and more while hiding your home IP.
Read more →
·5 min
Home Network Device Isolation: A Complete Guide to Safely Exposing Self-Hosted Services to the Internet
Learn how to safely expose self-hosted services to the internet using DMZ, VLAN isolation, and VM approaches while protecting your home network from attacks.
Read more →
·4 min
Foundry VTT Public Access Guide: The Right Way to Securely Expose Self-Hosted Services
Learn how to securely expose Foundry VTT to the public internet. Compare port forwarding, Cloudflare Tunnel, and reverse proxy solutions with practical advice on network isolation and layered defense.
Read more →
·3 min
Docker Containers vs Virtual Machines for Home Servers: How to Choose the Best Architecture
Docker containers vs VMs for home servers: compare resource usage, management, security isolation, and TrueNAS considerations to find the optimal Home Lab architecture.
Read more →
·3 min
NetBird + Caddy: Remote Access Without Exposing Public Ports
Learn how to use NetBird WireGuard mesh networking with Caddy reverse proxy for homelab remote access without exposing public ports. Covers Split DNS, TLS certificates, and ACL controls.
Read more →
·4 min
Self-Hosted Service Domain Resolution in Practice: A Deep Dive into Split DNS and Tailscale Solutions
A deep dive into domain resolution challenges for self-hosted home servers, covering Split DNS concepts and how Tailscale App Connector enables unified domain access across internal and external networks.
Read more →
·3 min
Complete Guide to Self-Hosted Music Servers: A Cross-Platform Navidrome Alternative to Spotify
Compare Navidrome, Jellyfin, and other self-hosted music servers. Covers cross-platform clients, remote access setup, and metadata management to replace Spotify.
Read more →
·6 min
Hands-On with Panel AI On-Premises Deployment: One-Click Enterprise Adoption and Unified Compute Cluster Scheduling
In-depth review of Panel AI v1.1.1: second-level installation, no-public-IP networking, batch compute cluster management. Learn how enterprise AI on-premises deployment barriers are dramatically lowered.
Read more →
Using LLMs to Master MikroTik Network …
·2 min
Using LLMs to Master MikroTik Network Configuration: A Practical Guide to AI-Assisted Network Operations
Explore how LLMs can streamline MikroTik RouterOS configuration — from natural language command generation to AI-assisted troubleshooting and security auditing.
Read more →
·2 min
Goodbye Paid Subscriptions: A Complete Practical Guide to Self-Hosting
A complete guide to self-hosting: replace paid subscriptions with Nextcloud, Jellyfin, Vaultwarden and more. Covers Docker deployment, backup strategy, and secure remote access.
Read more →
·2 min
AI Truly "Gets Its Hands On" Your Phone: Android Remote Control MCP v1.9.0 Deep Dive
Android Remote Control MCP v1.9.0 adds ChatGPT support, OAuth 2.1 auth, and major WebView reliability fixes. Let AI Agents operate any phone app like a human.
Read more →