Note that sudo echo does not work as non root because the shell redirection is attempted before the command runs. You want echo foo | sudo tee -a /bar instead
fix the documentation bug I reported 3 years ago, before it became a problem for stable Linux distributions. Instead of leaving up documentation that literally prevents the client from working and is an even bigger problem for stable distributions now. Yes it's my pet tiny bug, but how much effort can it really be to rewrite one section with configuration that DOESN'T break the product. I even wrote a suggestion for them.
You might want to be more specific, cloud flare has a lot of different products, and you're getting answers with differing assumptions.
For the self hosted focus, I use tail scale already, and when (not if) that company gets shitty, I will switch to head scale, or a competitor, or straight wire guard (plus firewall etc).
But I also run web sites on cf, and there's no real alternative, definitely not for free. I don't have hundreds of millions to spend on the CDN part, for starters.
I looked in to this a while back and didn't find anything complete. I ended up using a collector and feeding the reports in to my existing Loki and making my own Grafana dashboard.
I used to. It's really complicated and not big in the self hosted space.
I'd recommend the standard Prometheus, alert manager, and grafana stack instead. That's what I use now, and although yaml sure is something, at least there's tons of people to copy.
I use this, it's fine, but development on the open version is very very slow.
And they still haven't fixed my pet bug: they introduced Unix socket listening, I found that enabling it prevented upgrades, reported the bug with details and repro, and nobody cares. The workaround is simple, delete the socket file before every start. But I remain confused why a bug that prevents upgrades remains.
By default, unencrypted, and unauthenticated, and permissions rely on IDs the client can fake.
May or may not be a problem in practice, one should think about their personal threat model.
Mine are read only and unauthenticated because they're just media files, but I did add unneeded encryption via ktls because it wasn't too hard to add (I already had a valid certificate to reuse)
Same, I've been happy with my two play 1s for over a decade. But my secret is not updating, and not using the app (neither phone nor windows), I use Home Assistant (Python) and Noson. My other secret is not adding more Sonos speakers, because I believe you need to use the official phone app for grouping or updates.
Note that sudo echo does not work as non root because the shell redirection is attempted before the command runs. You want
echo foo | sudo tee -a /barinstead