Conceptual home server rack and remote datacenter linked through an orange cloud with a shield and padlock.

GNTECH Infrastructure Part 08: Cloudflare Zero Trust for Administrative Access

Build one controlled browser access path, test who is denied as carefully as who is allowed, and keep recovery independent of Cloudflare and your identity provider.

November 3, 2026 · 9 min · 1857 words · GnTech
Conceptual AI-generated editorial cover for GNTECH Infrastructure Part 3; the technical architecture diagram is inside the article.

GNTECH Infrastructure Part 03: Two MikroTik CHR Routers on Hetzner Proxmox

A staged, console-first tutorial for a Hetzner Proxmox host with two routed CHR transit networks and a separate NATed private VM LAN.

November 1, 2026 · 9 min · 1895 words · GnTech
Diagram of a browser, Cloudflare Tunnel, Guacamole, guacd, and Windows RDP with three clearly separated latency segments.

Slow Apache Guacamole RDP over Cloudflare Tunnel — Find the Bottleneck

Trace browser-to-tunnel, Guacamole-to-guacd, and guacd-to-Windows paths before changing settings. Includes safe diagnostics and an A/B test worksheet.

November 1, 2026 · 8 min · 1651 words · GnTech
Editorial illustration of an administrator laptop and a small homelab server linked through a cloud to remote computers.

MeshCentral with Cloudflare Tunnel — Deploy, Enroll, and Verify

A practical Linux deployment with a loopback-only origin, private administrator bootstrap, persistent data, and separate checks for the browser, agents, and remote sessions.

October 31, 2026 · 11 min · 2276 words · GnTech

Cloudflare Tunnel with Docker — Expose Homelab Services Securely

Run Cloudflare Tunnel in Docker to expose homelab services through Cloudflare’s edge. No open firewall ports, automatic HTTPS, and per-service ingress rules via a single cloudflared container.

May 14, 2026 · 7 min · 1368 words · GnTech

Cloudflare Tunnel Inside MikroTik — No Dedicated Proxy VM Needed

Cloudflare Tunnel gives you a secure outbound-only connection from your homelab to Cloudflare’s edge, proxying public traffic without opening any firewall ports. No pinholes, no DMZ, no exposing your home IP. The usual deployment is a Docker container or a systemd service on a Linux box. But if you have a MikroTik router running RouterOS 7.6+ with container support, you can run cloudflared directly on the router — zero extra hardware, zero extra VMs. ...

May 8, 2026 · 9 min · 1707 words · GnTech