The original post: /r/homelab by /u/Pop-X- on 2025-03-13 18:02:11.

Longtime tailscale user here, big fan. I use Cloudflare already to manage my domain’s DNS in conjunction with nginx proxy manager to provide https certs for my services.

But my self-hosting journey is attracting my friends, who want in the fun.

My question is simple: can I keep providing access to my partner and I over tailscale, given how straightforward and secure it is, but then turn to Cloudflare Tunnels (+ Access, presumably) for external users? How would I structure that network topography in a way that’s not overly convoluted and also limits user access to specific services?

To be clear, I’d want these methods to be run in parallel, not stacked (i.e. requiring both for access). Any suggestions?