Cloudflare-Tunnel on Mohammad Jashem — Senior Full-Stack Mobile Engineer

Self-Hosted Hugo CI/CD: Drone + Cloudflare Tunnel

mjashem@hotmail.com (Mohammad Jashem) — Sun, 19 Jul 2026 00:00:00 +0600

Push to main. Hugo rebuilds in CI, the built site ships to the server over SCP, the container force-recreates, and the new content is live in well under a minute, in practice. No port ever opens on the server. That last part is the whole point — and once you’ve run a static site this way, the idea of exposing a box to the internet to serve HTML feels archaic.

Zero-Trust Homelab: Cloudflare Tunnel, Traefik, No Ports

mjashem@hotmail.com (Mohammad Jashem) — Sun, 19 Jul 2026 00:00:00 +0600

Most homelab guides tell you to forward ports 80 and 443 on your router and put your home IP in DNS. This one opens zero inbound ports. The whole fleet — photos, passwords, CI, dev environments, this site — sits behind a single outbound tunnel that terminates on the router itself. No port to forward, no public IP to leak.