How to securely access homelab via the internet with mTLS

• home assistant
• Cloudflare
• mTLS
• iOS app

• why cloudflare doesn’t work
• what worked instead

various ways

• http basic auth
• google sign in / SSO in front - how is this pattern called?
• vpn
• mtls
• Tailscale vs Cloudflare tunnel
  • cloudflare tunnel actually didn’t work
  • tailscale works but you need to connect to vpn every time
  • bastion - uses tailscale, adds the proxy with public IP to the tailnet
    • then user goes through the proxy to the local network on RPi
• use excalidraw mcp (or smth else) for generating a diagram
• don’t share the entire setup
  • pick up interesting pieces from homelab/public-proxy repo (and ansible/) and share the bits in the article