I want to create my own local Certificate Authority (CA) or self-hosting a CA for my home lab.

Can this done with Traefik?

I want to create my own local Certificate Authority (CA) or self-hosting a CA for my home lab.

How is this done with OPNsense?

The sub-reddit has helped me a lot. I'd like to think I have something to offer in return.

I just got a Worpress site up and running using a Cloudflare tunnel.

TL;DR

If you want to self-host WordPress from a homelab without exposing your WAN IP:

• run Traefik in Docker
• put apps on a shared reverse-proxy network
• run cloudflared on the host
• authenticate with cloudflared tunnel login
• create a real tunnel
• use CNAME records to <tunnel-uuid>.cfargotunnel.com
• route tunnel ingress to Traefik on port 80
• let Traefik route to WordPress by labels

It works.

Documentation for this is somewhat extensive. I'll include steps in comments below to keep things a bit compartmentalized.

I'll be interested to hear if this is over engineered or just about right.