How to SECURELY ACCESS your Homelab apps from Mobile with mTLS

Video Description

CloudFlare Tunnel with Zero Trust is a great way to secure our self hosted applications but it can cause problems for mobile applications like Bitwarden, Paperless, Immich, Nextcloud, Home Assistant and so on. That's where mTLS can come in handy. mTLS allows use to have an extremely secure access to our applications, and is supported by mobile applications. In fact, Paperless, Bitwarden, and Immich allow allow for their own selection of client certificates in both Android and iOS! For those of you using Nextcloud and Home Assistant, this will work in Android as well even though the apps do not have their own custom certificate selection. Unfortunately, for iOS, iOS requires that we also present our certificate authority's certificate, and CloudFlare simply provides no way for us to export this. So if you are an iOS user wanting to use mTLS for all your apps including Nextcloud and Home Assistant, you'll have to stick around for another mTLS video that doesn't involve CloudFlare. I will also show you how to use Nginx Proxy Manager in this video and get SSL certs and how to do FULL HTTPS, from the client to cloudflare to nginx. #selfhosted #cloudflare Set up your own CloudFlare tunnel with Pangolin https://youtu.be/ISEP6SIrEVE Paperless Setup https://youtu.be/bDa8Z4hYnLU Vaultwarden Setup https://youtu.be/AwJXizTdth0 Nextcloud Setup https://youtu.be/7qz2rkUTRtw Bypass Cloudflare Zero Trust Access with Custom Headers on Immich https://youtu.be/J4vVYFVWu5Q Detailed Nginx Proxy Manager Tutorial with Immich https://youtu.be/Y7Z-RnM77tA ----- Timeline ------ 00:00 Intro 01:16 Why mTLS 03:37 Network Diagram and Steps 06:03 Docker Apps 07:06 Local DNS to bypass any CloudFlare protection 07:54 SSL with Nginx Proxy Manager and DNS Challenge 11:35 CloudFlare Tunnel Setup 16:20 Connecting to Paperless through CloudFlare Tunnel 17:07 Zero Trust Access 19:55 Restricting domain with mTLS 27:12 Configuring mTLS with Paperless (Android) 29:26 Configuring mTLS with Paperless (iOS) 31:11 Immich with mTLS 31:28 mTLS with unsupported apps like Nextcloud and Home Assistant (Android) 36:12 Conclusions