{"repo":"ondrasalek/cgnat-vps-gateway","free":true,"listed":false,"github":"https://github.com/ondrasalek/cgnat-vps-gateway","clone":"git clone https://github.com/ondrasalek/cgnat-vps-gateway.git","description":"Self-hosted CGNAT bypass using WireGuard, Traefik, Cloudflare, and Docker","language":"Mermaid","stars":15,"topics":["cgnat","docker","homelab","nas","self-hosted","wireguard"],"license":"MIT","category":"self-hosted-apps","readme_excerpt":"CGNAT VPS Gateway A production-ready, open-source architecture for exposing home servers behind CGNAT using a VPS gateway, a persistent WireGuard tunnel, Cloudflare as the security edge, and Traefik as a reverse proxy. This repository documents a clean, auditable alternative to proprietary tunneling solutions — designed for self-hosters who want full control over their network edge. --- Who This Is For This project is intended for: - Self-hosters behind ISP-imposed CGNAT - Homelab users with basic Docker and Linux knowledge - Engineers who want transparent networking , not black-box tunnels - Anyone running public-facing services from home securely It is not a one-click solution. The explicitness is intentional. --- Problem Statement Many ISPs place residential customers behind Carrier-Grade NAT (CGNAT) , meaning your home network shares a public IP address with hundreds of other customers. This makes it impossible to: - Host publicly accessible services from home - Open inbound ports for applications like Immich, Jellyfin, or Nextcloud - Use traditional port forwarding or dynamic DNS solutions This repository provides a complete, auditable, and self-hosted solution to bypass CGNAT without opening a single inbound port on your home router . --- Why This Architecture? Alternative Why Not? ------------ ---------- Cloudflare Tunnel Proprietary, closed-source client. All traffic passes through Cloudflare-controlled tunnels with limited observability. Tailscale Depends on coordina","default_branch":null,"files":null,"tree":[],"storefront":"/r/ondrasalek","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ondrasalek/cgnat-vps-gateway/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}