This is very cool, but you should not use Cloudflare Tunnels to stream media. Th...

ZeWaka · 2026-04-13T05:04:39 1776056679

Yep, I rent a $5 VPS in my region that I tailscale to for exactly that reason, as well as to un-CGNAT myself.

For an easy GUI solution for the latter, highly recommend Nginx Proxy Manager.

watermelon0 · 2026-04-13T05:46:00 1776059160

Cloudflare Tunnel publicly exposes your services, whereas Wireguard/Tailscale are VPNs.

Tailscale (but not Headscale) offers Funnel, which is a reverse proxy, but you cannot use it with your own domain.

Pangolin is the closest alternative to CF Tunnel, but self-hosted NetBird with reverse proxy functionality can also be used.

oynqr · 2026-04-13T06:08:57 1776060537

The intersection of people who can self host headscale or netbird and those who can not set up their own reverse proxy is probably the empty set.

antihero · 2026-04-13T06:36:36 1776062196

Can tailscale funnel do custom domains yet?

Personally I'm switching to rathole+traefik, weirdly something I was researching and experimenting with in the early hours of this morning (I have now not slept and have to go to work).

ffsm8 · 2026-04-13T15:09:22 1776092962

Haven't used it like that myself, but stumbled upon this last year

https://tailscale.com/docs/concepts/domain-ownership

This let's you use your own domain for your tailnet, isn't the funnel but - but isn't it even better? Unless you actually want a publicly routable domain name, then you're back some hosted ingress I guess

jasonfrost · 2026-04-13T12:22:15 1776082935

IIRC CF terms were about caching media not streaming media

AdrienPoupa · 2026-04-13T13:18:18 1776086298

Since https://blog.cloudflare.com/updated-tos it is not completely clear if you disable Cloudflare's cache indeed. Still the terms are unclear enough that they could cut you out, and I'd feel uneasy exposing a Jellyfin instance publicly, but that's just me :)