01
Install the agent
Use the Home Assistant add-on, Docker or another supported installation method.
Access your home services from anywhere
Tunely connects Home Assistant, Immich, Paperless-ngx and other services at home to a normal HTTPS address you can open from anywhere. You do not need port forwarding or a VPN client.
Free for up to 3 servicesNo credit card required
No port forwardingNo VPN clientHosted in Europe
Tunely SetupAgenthomelab
ConnectedSelected service
Home AssistantSmart home control
ImmichPhoto library
Paperless-ngxDocument managementAgent connectedOK
Home Assistant reachableOK
Secure endpoint readySecure endpoint ready
Secure endpoint
home.example.tunely.eu2 free services remaining
Using Home Assistant?
Configure Home Assistant automatically
Install the Tunely add-on and your Home Assistant instance can be configured automatically.
How it works
From installation to your first service
Install the Agent, add your services, and access them from anywhere.
02
Add your services
Choose a template such as Home Assistant or Immich, or enter the connection details yourself.
03
Access them from anywhere
Each service gets an HTTPS address that works from your phone, tablet or computer.
Supported services
One Agent for your services at home
Home Assistant is just the beginning. The same Tunely Agent can make Immich, Paperless-ngx, Nextcloud, and other HTTP(S) services in your network reachable.
Home Assistant
Immich
Paperless-ngx
Nextcloud
+ any HTTP(S) service
Why Tunely
Install once at home. Then just open the URL.
The Tunely Agent runs where your services run. Nothing extra needs to be installed on your phone, tablet, or laptop. Family members can use the same normal HTTPS address for each service.
- No VPN connection to start
- No domain required
- No inbound port forwarding on your router
Remote access & security
Remote access without inbound port forwarding
The Agent builds the connection from inside your network. You do not need to open ports on your internet connection, and Tunely works with CGNAT and DS-Lite.
Normal HTTPS address
Open it from any phone, tablet, or computer
ClientPhone, tablet, or computer
Tunely EdgeRoutes and protects the public endpoint without terminating TLS
Tunely AgentConnects outward from the network where your apps run
Home servicesHome Assistant · Immich · more
TLS encrypted until the AgentSecurity & privacy
Your application traffic remains encrypted
Your connection stays encrypted until it reaches your home.
Tunely forwards the TLS connection through our Edge to the Agent in your network, where TLS is terminated. Private keys stay on your Agent and Tunely cannot read the content of your connection.
Private keys stay on the Agent
TLS private keys remain in the customer-controlled Agent environment, not on Tunely Edge.
No inbound port forwarding
The Agent connects outward. You do not need incoming port forwarding on your home router.
Routing metadata is visible
The Edge sees metadata needed to route and protect connections, including source IP and target hostname.
Protection at the Edge
Rate limits and CrowdSec protect the public connection layer.
Using Home Assistant?
Remote access for Home Assistant
Install the Tunely Home Assistant add-on, connect it to your account and Tunely can automatically configure the Home Assistant instance running on the same system.
Once connected, use the generated Tunely address as your external Home Assistant URL. No additional software is required on your phone. Your free plan still leaves room for two more services.
Home Assistant setupTunely AgenthomelabInstalled on Home Assistant OS
Agent connectedOK
Home Assistant reachableOK
Ready to useOK
External Home Assistant URL
home.example.tunely.euPricing
Start free. Upgrade when you need more.
Start with the free plan. Upgrade for more services, higher bandwidth, and custom domains.
Free
Start here€0No credit card required
- 3 services
- 5 Mbit/s
- No monthly data limit
- Tunely domain
Homelab
More room for a growing homelab.
€75 / year
- 10 services
- 25 Mbit/s
- No monthly data limit
- Tunely domain
- Custom domains
SOHO
For larger setups and shared environments.
Coming soon
- Unlimited services
- 100 Mbit/s
- No monthly data limit
- Custom domains
Bandwidth is limited by plan. There is no monthly data limit.
Frequently asked questions
Do I need my own domain?
No. Tunely provides an address below tunely.eu. Paid plans can also use custom domains.
Do I need to install Tunely on my phone?
No. Your services are accessed through normal HTTPS addresses. The Tunely Agent only runs inside the network where your services are hosted.
Does Tunely work with CGNAT or DS-Lite?
Yes. The Agent establishes the connection from inside your network, so you do not need to open ports.
Can Tunely read my traffic?
Tunely can see the metadata required to route a connection, such as the source IP and target hostname. Application traffic remains encrypted until it reaches the Tunely Agent in your network, where TLS is terminated.
Which applications can I use with Tunely?
Tunely works with HTTP and HTTPS services reachable by the Agent. Templates simplify setup for common applications such as Home Assistant, Immich, and Paperless-ngx.
Is there a monthly traffic limit?
No. Plans limit available bandwidth and the number of services, but there is no monthly transfer quota.
Does Tunely replace the login of Home Assistant or Immich?
No. Tunely provides the connection to your service. Authentication is still handled by the application itself, such as Home Assistant or Immich.
Secure remote access for Home Assistant and self-hosted apps
Start with Home Assistant or add any other HTTP or HTTPS service reachable by your Tunely Agent.
Start for free
3 services includedNo credit card required