Self-Hosted Website

Project overview

This portfolio is hosted on a Docker-based Nginx web server on the Proxmox host. A Cloudflare Tunnel provides an outbound connection from the home server to Cloudflare, which routes public HTTPS traffic to the intended web service.

Deployment highlights

• Registered a custom domain and configured its public DNS through Cloudflare.
• Created a static homepage served by Nginx in Docker.
• Bound the Nginx container to a loopback-only host port.
• Ran the Cloudflare connector with host networking so it can reach that host-local service.
• Configured the public application route for the domain.
• Verified the web server returned HTTP 200 OK and loaded in a browser.

Security design

The public route points only to the website application. It does not publish the Proxmox administrative console, SSH, or media-service dashboards. Tunnel tokens are treated as credentials and must be rotated if exposed.

Host security still matters: application updates, restricted admin access, sensible firewall rules, and backups remain part of the maintenance plan.

What comes next

Improve individual project documentation, add a dedicated professional contact method, test mobile accessibility, and set up routine review of container and certificate health.