You do have open ports as it goes though Cloudflare. If Authelia ever has a CAVE you could be pwded. Cloudflare is nice but it gives a false sense of security and routes everything unencrypted though a large tech company.
The difference is that Cloudflare has access to everything and exposes your stuff directly on the internet. A VPN would be far more secure with the tradeoff of inconvenience.
Personally I proxy everything through cloudflare tunnels using a wildcard cert, and have Authelia in front of everything. No open ports.
Haven’t had bot problems since swapping to this setup.
You do have open ports as it goes though Cloudflare. If Authelia ever has a CAVE you could be pwded. Cloudflare is nice but it gives a false sense of security and routes everything unencrypted though a large tech company.
Sure, but that’s true of anything you use to try to keep your network secure. Your VPN is also one CVE away from opening your network to bad actors.
If you are that worried, you shouldn’t have anything accessible outside your network at all, even though a VPN.
The difference is that Cloudflare has access to everything and exposes your stuff directly on the internet. A VPN would be far more secure with the tradeoff of inconvenience.