GitLab: FlarelyLegal/cf-gitlab
GitHub: FlarelyLegal/cf-gitlab
TL;DR: One Debian 13 LXC, 50 GB disk, 13 Cloudflare products, zero inbound ports. Storage never fills up (R2). Certs never expire (DNS-01). Login is gated by identity, not passwords (Access). Public downloads are cached at the edge (Workers). Backups go offsite automatically (R2). SSH works from anywhere (Tunnel). One
.envfile configures everything.