Guide explaining how to set up mTLS with Cloudflare for secure external access

[donmerendolo]

Hi 👋, 2 days ago I made a pull request in rmfakecloud-proxy adding support for mTLS: ddvk/rmfakecloud-proxy#26. I now made a detailed guide explaining how to set it up in Cloudflare.

With this, one can sync the reMarkable tablet securely with an rmfakecloud instance from outside the local network, without exposing it directly to the internet and without VPNs. using a Cloudflare Tunnel and checking for client certificate.

[Eeems]

It looks like you may have forgotten to add the new file when you committed?

[donmerendolo]

Correct 😅, adding it now

[donmerendolo]

Must say it's possible to verify the client certificate in a self-hosted reverse proxy without Cloudflare, though this requires opening a port, but I think it would be pretty secure since the clietnt has to authenticate itself before even reaching rmfakecloud.

I think this approach hadn't been talked about previously (at least I haven't seen it before) because rmfakecloud-proxy does not support client authentication, yet (I hope not for long).