Skip to content

Tunely DocsPublish homelab services without opening inbound ports.

Learn the basic model, set up an agent, and manage services from the dashboard.

Tunely

Tunely At A Glance

Tunely components: users connect from outside the homelab through Tunely to the local agent and private services

User

A user is someone outside the homelab who wants to reach a private service while traveling or from another network. They open a public Tunely address such as ha.demo.tunely.eu or media.demo.tunely.eu, instead of connecting directly to the home network. The Quick Start shows the shortest path from account to first reachable service.

Tunely

Tunely acts as the public gateway for those addresses. It receives the connection and forwards the encrypted data stream to the agent that already has an outbound connection open to Tunely. You manage the public side in the dashboard, including domains and published service entries.

Agent

The agent runs inside the homelab and connects outward to Tunely. Over that connection it receives encrypted requests from users and forwards each request to the configured local service target. Choose the right installation path in the agent module overview or inspect the connected agent in dashboard agents.

Local Services

Local services are the applications already reachable from inside your home network, such as Home Assistant, Jellyfin, or a NAS web UI. Tunely does not require them to expose ports to the internet; the agent reaches them by the same hostnames and ports you would use locally, such as homeassistant.local:8123 or jellyfin:8096. See publishing services for the fields used to map a Tunely address to a local target.

Where To Go Next

AreaContent
Quick StartShortest path from account to first published service.
DashboardDashboard workflows and screenshot-based user guidance.
AgentsInstallation and operations paths for Docker, Home Assistant, and Synology.
OperationsTroubleshooting and maintenance notes.

Public documentation for Tunely.