Here’s why I stopped exposing my home lab to the Internet—and what I use instead. In this video I walk through four secure, modern remote-access options that let you reach Proxmox, pfSense, Portainer, Gitea, Grafana, Home Assistant, and more without opening ports or playing NAT roulette: Twingate, Tailscale (WireGuard mesh), vanilla WireGuard, and Cloudflare Tunnel.
Written blog post on this topic: https://www.virtualizationhowto.com/2025/07/stop-exposing-your-home-lab-do-this-instead/
WG-Easy post: https://www.virtualizationhowto.com/2023/07/wg-easy-wireguard-config-generator-vpn-server-in-docker/
GEEKOM A5 (2025 edition) Great for Proxmox! https://geni.us/geekoma52025-3
https://www.skool.com/homelabexplorers/about?ref=25f64c297b724689ae81c7dd30ba2c21
★ Substack URL: bleevht.substack.com
★ Subscribe to the channel: https://www.youtube.com/channel/UCrxcWtpd1IGHG9RbD_9380A?sub_confirmation=1
★ My blog: https://www.virtualizationhowto.com
★ Twitter: https://twitter.com/vspinmaster
★ LinkedIn: https://www.linkedin.com/in/brandon-lee-vht/
★ Github: https://github.com/brandonleegit
★ Facebook: https://www.facebook.com/people/VirtualizationHowto/100092747277326/
★ Discord: https://discord.gg/Zb46NV6mB3
★ Pinterest: https://www.pinterest.com/brandonleevht/
Introduction to exposing your home lab to the Internet! 0:00
Video sponsor message – 1:00
Twingate – 1:45
Looking at the Twingate Docker Compose code – 2:41
Tailscale – 5:20
Getting started with Tailscale – 6:12
Wireguard – 7:20
WG-Easy for Wireguard – 8:00
Cloudflare tunnel – 8:24
Wrapping up secure access solutions to home lab – 9:18
