Cloudflare Tunnel
Zero-trust access without exposed ports
#
overview
Automated media pipeline: request → search → download (vpn) → organize → stream.
// data flow
👤 you
→
🎯 overseerr
→
🎬 radarr/sonarr
→
vpn zone
🛡️ gluetun
→
📥 qbittorrent
→
💾 media storage
→
📺 plex
tip
TV shows auto-download new episodes. Request once, never worry again.
#
quickstart
01
open overseerr
Go to overseerr.home.djo.ro and sign in with Plex.
02
search & request
Find your movie/show and click Request.
03
wait
System searches, downloads via VPN, and organizes.
04
watch
Open plex.home.djo.ro and enjoy.
#
services
#
architecture
📺 Media Stack
🎯 Overseerr
🎬 Radarr
📡 Sonarr
🔍 Prowlarr
📺 Plex
🔒 Security Layer
🛡️ Gluetun VPN
📥 qBittorrent
🛡️ AdGuard DNS
🔐 WireGuard
🦊 Suricata IDS
📊 Monitoring
📈 Grafana
📊 Prometheus
📊 Tautulli
🕸️ Topology
📡 Node Exporter
#
network topology
// infrastructure graph
edge / cdn
🌐
Internet
☁️
Cloudflare
tunnel + dns
encrypted
gateway
🖥️
OpenWRT
router + firewall
🦊
Suricata
ids/ips
🔐
WireGuard
remote access
vlan segmentation
core services
🛡️
AdGuard
dns + blocking
🌐
Nginx
reverse proxy
📈
Grafana
dashboards
docker network
applications
Plex
Overseerr
Radarr
Sonarr
Prowlarr
Tautulli
Prometheus
Gluetun
qBittorrent
Storage
// security features
🔒
active
🛡️
active
DNS-level Ad Blocking
Network-wide protection via AdGuard
🦊
active
Intrusion Detection
Real-time threat monitoring with Suricata
🌐
active
VLAN Segmentation
Isolated network zones with strict firewall rules
🔐
active
VPN Kill Switch
All torrent traffic routed through encrypted VPN
🔑
active
WireGuard VPN
Secure remote access from anywhere
zero-trust architecture
All external traffic flows through Cloudflare's edge network. No ports are exposed to the internet—services are accessed via authenticated tunnels with end-to-end encryption.