And miles to go ...

Normally:

Issues:

You have opened port on your router (it is like leaving a door open of home)

You must secure this open port heavily. If someone hacks your application (Website), the hacker will be inside your home network

Cloudflare solution:

Notes:

Cloudflared (a daemon) needs to run on your home network on some pc

On routers, going outside traffic is allowed always. Incoming traffic is disallowed.

Cloudflared outbound traffic is allowed

Websocket is different from http, because it start from one side, but after starting, two-way traffic is allowed

For #3: you need a domain name

For #4: you need to tell cloudflared to send any incoming traffic to your laptop

Steps

Get your own domain name or free dns name.

Create a cloudflare account > Home > Add a site > mysite.com > Choose free plan > DNS continue > Add records later + Confirm

Note down nameservers from cloudflare:

clark.ns.cloudflare.com
liz.ns.cloudflare.com

On your domain registrar > Login > Set Nameserver to above (cloudflare) nameservers.

Back to Cloudflare > Check nameservers > Finish later > Check nameservers (it will be done in few mins - dont wait for it)

Creating cloudflare tunnel

Access > Launch zero trust > Access > Tunnels > Create new tunnel e.g. mysite tunnel > Note the secret code (Tunnel token)

Go to portainer > Add new stack > use the docker compose script with the tunnel token as env variable

As soon as portainer stack is ready, cloudflare will show it. Press next

Choose a subdomain e.g. www

Choose your laptop website e.g. http://192.168.1.56:8000 for myhomewebsite e.g. hosted using python3 -m http.server

Now browse from anywhere: www.mysite.com

docker-compose script:

version: "2.1"

volumes:
  cloudflared_config:

services:
  heimdall:
    image: cloudflare/cloudflared
    container_name: cloudflared
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/Chicago
    volumes:
      - cloudflared_config:/etc/cloudflared
    command: tunnel run
    environment:
      - TUNNEL_TOKEN=${TUNNEL_TOKEN}
    restart: unless-stopped

Volume may not be correct. May be /usr/local/etc/cloudflared based on: https://github.com/cloudflare/cloudflared/blob/master/config/configuration.go

Direct docker run:

docker run cloudflare/cloudflared:latest tunnel --no-autoupdate run --token eyBlahBlahBlah123

And miles to go ...

Other articles

Mindustry composition flowchart

Other articles

links

social