Service Integrations
Quick-start guides for popular homelab and self-hosted services. All examples use --allow for SSO access control — replace the email with your own or remove it to require login from the tunnel owner only.
Platform Guides
Home Automation
🏠 Home Assistant
Home automation platform. WebSocket required for full UI functionality including Lovelace dashboards and real-time entity updates. Install via the HA Add-on
hle expose --service http://localhost:8123 \ --label ha --websocket \ --allow alex@gmail.com🔴 Node-RED
Visual automation platform. WebSocket needed for flow editor’s live debugging.
hle expose --service http://localhost:1880 \ --label nodered --websocket \ --allow alex@gmail.com🏡 openHAB
Open-source home automation software.
hle expose --service http://localhost:8080 \ --label openhab🏘️ Domoticz
Home automation system.
hle expose --service http://localhost:8080 \ --label domoticz📡 Zigbee2MQTT
Zigbee to MQTT gateway. WebSocket needed for live device map.
hle expose --service http://localhost:8080 \ --label z2m --websocketMedia & Entertainment
🎬 Jellyfin
Open-source media system. WebSocket for real-time playback sync.
hle expose --service http://localhost:8096 \ --label jellyfin --websocket \ --allow google:alex@gmail.com🎥 Plex
Closed-source media server.
hle expose --service http://localhost:32400 \ --label plex📺 Emby
Media server and streaming platform.
hle expose --service http://localhost:8096 \ --label emby🎵 Navidrome
Open-source music streaming server.
hle expose --service http://localhost:4533 \ --label music📚 Calibre-Web
Web interface for Calibre e-book library.
hle expose --service http://localhost:8083 \ --label books📸 Immich
Open-source photo/video backup. Great for sharing photo albums with family.
hle expose --service http://localhost:2283 \ --label photos --websocket \ --allow google:mom@gmail.com🎧 Audiobookshelf
Audiobook and podcast streaming server.
hle expose --service http://localhost:13378 \ --label audiobooks🎞️ Overseerr
Plex/Emby request management.
hle expose --service http://localhost:5055 \ --label overseerrDevelopment & DevOps
🐙 Gitea
Self-hosted Git service. Perfect for webhook ingress from GitHub/GitLab.
hle expose --service http://localhost:3000 \ --label git🐋 Portainer
Docker management UI. Manage containers remotely with SSO protection.
hle expose --service http://localhost:9000 \ --label portainer \ --allow alex@gmail.com📊 Grafana
Monitoring and observability. WebSocket required for live dashboards.
hle expose --service http://localhost:3000 \ --label grafana --websocket \ --allow github:devops-lead📈 Uptime Kuma
Uptime monitoring. WebSocket needed for real-time status page.
hle expose --service http://localhost:3001 \ --label status --websocket💻 Code Server / VS Code
Browser-based VS Code. WebSocket required. Perfect for coding on the go.
hle expose --service http://localhost:8080 \ --label code --websocket \ --allow google:alex@gmail.com⚡ n8n
Workflow automation platform.
hle expose --service http://localhost:5678 \ --label n8n --websocket🔥 Prometheus
Metrics and monitoring database.
hle expose --service http://localhost:9090 \ --label promNetworking & Security
🛡️ Pi-hole
DNS ad-blocker and DHCP server.
hle expose --service http://localhost:80 \ --label pihole🚫 AdGuard Home
Ad-blocking DNS server.
hle expose --service http://localhost:3000 \ --label adguard🔐 WireGuard UI
WireGuard configuration interface.
hle expose --service http://localhost:51821 \ --label wg🔄 Nginx Proxy Manager
Reverse proxy and certificate manager.
hle expose --service http://localhost:81 \ --label npmProductivity & Files
☁️ Nextcloud
Cloud storage and collaboration platform. Share with family or team.
hle expose --service http://localhost:80 \ --label cloud --websocket \ --allow google:alex@gmail.com \ --allow google:partner@gmail.com📄 Paperless-ngx
Document management system.
hle expose --service http://localhost:8000 \ --label docs🔑 Vaultwarden
Password manager server. WebSocket required for live sync.
hle expose --service http://localhost:80 \ --label vault --websocket \ --allow alex@gmail.com📖 Bookstack
Knowledge management wiki.
hle expose --service http://localhost:6875 \ --label wiki🍳 Mealie
Recipe and meal planning application.
hle expose --service http://localhost:9925 \ --label recipes💰 Actual Budget
Personal budgeting application.
hle expose --service http://localhost:5006 \ --label budgetNAS & Storage
💽 Synology DSM
NAS web interface. Expose NAS web UI without port forwarding.
hle expose --service http://localhost:5000 \ --label nas \ --allow alex@gmail.com🗄️ TrueNAS
FreeBSD-based NAS operating system.
hle expose --service http://localhost:80 \ --label truenas📦 OpenMediaVault
Open-source NAS solution.
hle expose --service http://localhost:80 \ --label omvHome Network
🔥 pfSense / OPNsense
Open-source firewalls.
hle expose --service https://localhost:443 \ --label firewall📶 UniFi Controller
WiFi and network management.
hle expose --service https://localhost:8443 \ --label unifi📷 IP Cameras
Expose any IP camera web interface.
hle expose --service http://192.168.1.100:8080 \ --label cam1 \ --allow alex@gmail.comAdvanced Integrations
Services that need extra configuration — custom headers, trusted proxies, websocket paths, or docker-compose changes.
📹 Frigate NVR
Real-time AI object detection for cameras. WebSocket needed for live MJPEG streams and event notifications. Pair with --allow to check your cameras remotely.
hle expose --service http://localhost:5000 \ --label cameras --websocket \ --allow google:alex@gmail.com🏠 Home Assistant + Companion App
Full HA setup including WebSocket for Lovelace and Companion App push. Set your tunnel URL as the External URL in HA > Settings > System > Network.
# Expose HA with websocket supporthle expose --service http://localhost:8123 \ --label ha --websocket \ --allow google:alex@gmail.com
# In HA: Settings > System > Network# Set External URL to your HLE tunnel URL# e.g. https://ha-x7k.hle.world🧪 Jupyter Notebook / Lab
WebSocket required for kernel communication. You must configure Jupyter to accept the HLE tunnel hostname as an allowed origin.
# Start Jupyter with permissive origin (HLE handles auth)jupyter lab --ip=0.0.0.0 --port=8888 \ --NotebookApp.allow_origin='*' \ --no-browser
# Expose ithle expose --service http://localhost:8888 \ --label jupyter --websocket \ --allow google:alex@gmail.com🔄 Syncthing
File sync with a web UI on port 8384. Syncthing binds to 127.0.0.1 by default — no extra config needed. The GUI requires CSRF tokens, so use the same browser session.
hle expose --service http://localhost:8384 \ --label sync \ --allow google:alex@gmail.com🔌 ESPHome Dashboard
OTA firmware builder for ESP devices. WebSocket needed for live log streaming. Ideal for flashing devices when you’re away from home.
hle expose --service http://localhost:6052 \ --label esphome --websocket \ --allow google:alex@gmail.com🖥️ Proxmox VE Web UI
The Proxmox management interface runs on HTTPS port 8006 with a self-signed cert. HLE handles the TLS termination — use https:// in the service URL. See the Proxmox guide for full setup.
hle expose --service https://192.168.1.10:8006 \ --label proxmox --websocket \ --allow google:alex@gmail.com🐙 Gitea + Webhooks
Self-hosted Git with webhook ingress. Expose Gitea so external services (GitHub, CI runners) can send webhooks to your instance. Set the ROOT_URL in app.ini to your tunnel URL.
# In gitea/conf/app.ini:# ROOT_URL = https://git-x7k.hle.world/
hle expose --service http://localhost:3000 \ --label git --websocket \ --allow google:alex@gmail.com🎥 Plex + Remote Access
Replace Plex’s built-in remote access with HLE. In Plex > Settings > Network, set Custom server access URLs to your tunnel URL. Disable “Remote Access” to avoid port conflicts.
hle expose --service http://localhost:32400 \ --label plex \ --allow google:alex@gmail.com \ --allow google:partner@gmail.com
# Plex Settings > Network:# Custom server access URLs:# https://plex-x7k.hle.world🤖 Ollama + Open WebUI
Run LLMs locally with Ollama and expose the Open WebUI interface. WebSocket needed for streaming token output. Keep the Ollama API (11434) local — only expose the web UI.
# Ollama API stays local (port 11434)# Only expose Open WebUIhle expose --service http://localhost:3000 \ --label ai --websocket \ --allow google:alex@gmail.com🎮 Minecraft (Bedrock/Java via web map)
Expose BlueMap or Dynmap live world maps. Share a read-only map with friends — no port forwarding on the game server needed.
# BlueMap web map (default port 8100)hle expose --service http://localhost:8100 \ --label mc-map \ --allow google:alex@gmail.com \ --allow google:friend@gmail.com
# Dynmap (default port 8123 — careful, same as HA)hle expose --service http://localhost:8123 \ --label dynmap \ --allow google:alex@gmail.com