Home Lab, Zero Open Ports: Remote Access with Cloudflare Tunnel and WARP

You’ve got a home server. Maybe Proxmox, a NAS, a self-hosted app stack, or just a Raspberry Pi running some containers. And you want remote access without touching your firewall. The instinctive move is to open ports. Don’t. Your home router’s public IP is being scanned continuously. One misconfigured service — one unauthenticated endpoint, one unpatched daemon — and you’ve handed over your local network to someone who will do something interesting with it. ...

August 17, 2026 · 8 min · hicke

SASE for Home Labs and Private Services: Zero Trust Without the Enterprise Price Tag

SASE — Secure Access Service Edge — pronounced as “sassy” (/ˈsæsi/), is a word invented by a Gartner analyst to sell enterprise contracts. It worked. But the underlying ideas are genuinely useful, and the tools to implement them are now free. If you run a home lab, self-host services, or have workloads scattered across Cloudflare Workers, Railway, or Fly.io, this is for you. What SASE Actually Means SASE combines two things that traditionally lived in separate products: ...

May 2, 2026 · 5 min · hicke

How I Set Up My Blog with Hugo, GitHub Actions, and Cloudflare Workers

I wanted a simple blog: write a Markdown file, push to GitHub, and have it live on my domain within a minute. No CMS, no server to maintain, no monthly bill. Here’s exactly how I built it. The Stack Hugo — static site generator. Builds the entire site in under 100ms. PaperMod — clean, fast Hugo theme with dark mode, tags, and RSS out of the box. GitHub — source of truth. Every push triggers a deploy. GitHub Actions — builds the site and deploys it on every push to master. Cloudflare Workers + Assets — hosts and serves the static files globally. Free tier is more than enough for a personal blog. Cloudflare DNS — manages the custom domain with automatic SSL. Total cost: zero. ...

May 1, 2026 · 5 min · hicke