No Static IP, No Open Ports: How Tailscale and Cloudflare Tunnel Run My Homelab

My homelab sits behind a normal home internet connection with no static IP and no open ports. Tailscale gives me private access from anywhere, and Cloudflare Tunnel puts apps on the internet. Here's how the magic actually works, and why it's more secure than port forwarding.