Streaming My Plex Library in a Tesla with a Cloudflare Tunnel

The Tesla's center screen runs a full Chromium browser, and once you realize that, the car stops being a car and starts being a 17-inch kiosk you happen to drive. I built a custom launcher page for it — dark theme, big touch-friendly tiles for cloud gaming services, a clock, a search bar — and the obvious next tile was my Plex server sitting on my home network.

The problem is the same one every homelab person hits: my server lives on a private IP behind my router, and the car is on LTE. The old answer is port forwarding, which means exposing Plex directly to the internet and trusting its auth as your only wall. The better answer in 2026 is a Cloudflare Tunnel: a lightweight daemon on the server dials out to Cloudflare, and Cloudflare routes a public hostname back through that connection. Zero open ports, my home IP stays hidden, and TLS is handled for me.

Two gotchas are worth writing down because both produce confusing symptoms. First, Cloudflare caching will break video seeking — playback starts fine, but scrubbing the timeline stalls or errors. You need a cache rule that bypasses caching for the Plex hostname; skip it and you will spend an evening blaming Plex's transcoder for something that is actually a CDN eating range requests. Second, Plex itself needs to know about the tunnel: the custom server access URL setting has to include the public hostname, or remote clients will try to reach the server some other way and fall back to relay quality.

With both in place, the launcher tile points at the tunnel hostname and the car streams my library directly — full quality, no relay, while parked obviously. Total new attack surface on my home network: zero ports.