How do you feel about the privacy implications of Cloudflare theoretically being able to read all your data? I guess this theoretical downside is outweighed by the practical upsides?
I don't have a homelab for privacy so much as convenience. And I accept the risk of trusting vendors. I also have a datacenter cabinet and the techs there have a key to the cabinet. That's even more dangerous access theoretically. I suppose if someone compromised cloudflared (more possible in this era of supply-chain attacks and Cloudflare's renewed commitment to vibe-coding) there's a risk. C'est la vie.
FWIW: Depending on your use case, Cloudflare doesn't have visibility into to cleartext. In my setup, I use their arbitrary TCP tunneling feature to tunnel SSH for a remote host, which works great.
That said: I do also tunnel HTTP, and I've come to terms with the privacy risk. Being able to setup enforcement of things like mTLS at the edge is quite nice.
