Mixed intranet/public using cloudflare cloudron (for a home server)

[sean-abbott]

Hello!

Apologies for coming in hot with a request/suggestion when I"m new (and not yet paying). Cloudron looks very, very close to what I need and want to I wonder if there's any appetite for my use case.

I want to run cloudron to get away from big tech companies. Most of the services I want to run (including cloudron itself, actually), I only want to make available inside my router at my house, without being accessible on the public internet (1). There's only a few services that I want to make available on the internet, and those services I would love to only publish via cloudflare tunnels (or some similar service if it's easier...tailscale...whatever).

So, if there's any appetite at the cloudron company? group? for this, i'd be happy to both pay and contribute, but I don't know the internals and if there's no path forward to getting this setup than I probably will just :back_away_slowly:

Just in case this request provokes even the mildest curiousity, here's a lot more details about what I have and what I want to do.
I have 2 old corporate desktops running in my basement. These are my servers.
I have a fairly bog standard consumer grade router, running asuswrt-merlin.
I have a pihole handing my internal dns and blocking ads. I also use this to provide localized domain names (using .internal as recommended by ICANN).
I have domains I can use (on a dns provider supported by cloudron) and a cloudflare account.

What I want:
I want to have cloudron running on one (or both?) of my "servers". I want to have cloudron (admin), a picture library, a git server, home assistant, finances, bookmark management, a video server, some note taking, some task management, bookmark management, maybe receipt management, and probably eventually some other stuff being totally private and lan only.

I want to be able to send (but not receive) emails on listmonk or keila. (I'd be interested in receiving at some point, but not if it required listening on 25 at my house; see a bit later)

I want to be able to put a url shortener, a music server, jitsi, teamspeak, maybe calendar, MAYYYBE mastodon, a blog, rss reader, MAYBE some distributed storage, element/matrix (+ a slack bridge), maybe pastebin, maybe some pocketbase experiments, maybe surveys (I do volunteer stuff that some of these things would be nice for), and maybe eventually other stuff out on the web at their own urls, but ideally I want it behind cloudflare (and bonus nachos, because cloudflare auth).

So yeah...I wonder if there's any appetite for my use case? I'd be happy to like...try stuff out and contribute code, but I'd like someone to work with who understands the architecture if I'm gonna go for it. Or if ya'll are really close and think maybe I have a use case that's common, that'd be cool too.

I get and appreciate that ya'll are putting security forward (love the firewall management, etc), but I just can't put my home network directly on the internet, and I feel like I have hardware (or can buy hardware) to support his for like... < 2 months of an ec2 instance that would suppor the stuff I wanna do.

Anyhooo....hopefully I remember to check back (and hopefully ya'll approve this post). You've got a super cool thing going here...just hope the home user not on the internet case makes sense to someone.

1. I'm actually surprised even businesses want the cloudron admin interface accessible on the internet, tbh.

[james]

Hello @sean-abbott and welcome to the Cloudron forum

Yes, you can run Cloudron at home, see https://docs.cloudron.io/installation/home-server and https://docs.cloudron.io/installation/intranet.
With the upcoming release of Cloudron 10 we have implemented VPN protection for apps, see: https://forum.cloudron.io/post/126100

That could already provide some relieve to your needs.

There are already many other forum topics about Cloudflare tunnels and similar set-ups as you describe.

@sean-abbott said:

the cloudron admin interface accessible on the internet

That is the default but can be changed with a firewall and VPN app.
Since how this should be done is very dependent on what 'flavor' one admin prefers, Cloudron does not impose one strict route but leaves it open to the admin.