Hi, I got a server to work using private tunnels (works amazingly, this is the perfect solution for bypassing CG-NAT), however most of my friends aren't that tech-savvy and I doubt would be able to create the account and enable the environment. Is there a way to use the Zrok frontend or something else for clients to be able to connect without needing to enable an environment?
Hi @oliverjhn. Glad to hear zrok is rocking for you. 
Minecraft requires a TCP port be available to connect to and unfortunately, public TCP ports are not a feature of zrok.io at this time. You can definitely do it using private shares though. Just beware that there are limits associated to private sharing. Depending on how many friends you have, you might need to leave the free plan.
Aside from that, the only thing you'll be able to do is to use a VPS. I made a video about using zrok for this exact situation. If you're interested you could give that a shot. Then you just give your friends the ip address of the vps.
For one, thank you for your fast answer. Ok, that's fine, also could you share the limits with private sharing? I'd probably be happy to pay the price because it's pretty cheap compared to hosted servers. It's primarily a reverse proxy so the only cost would be bandwidth right?
Also could you explain the pricing a bit to me, there are 8 of us right so if I went on the basic plan would that be enough? It says 5 environments but is that environments per account, because my friends each create their own one, or is it 5 environments connected?
Thank you for you help.
Pricing - zrok shows you the pricing options. You need one share and 7 "private access" points. So the $7 plan would fit for you.
You'd start zrok on your server and set it up, then walk each of your friends through the "how do i install/get zrok" and then the "how do i enable the environment" and then "how do i start the zrok access"... After that, it's just Minecraft... 
I would just share your environment with your friends using your zrok enable token. (you could always change/revoke it later in the zrok ui if you need to)
This is pretty much exactly what I demonstrated in the blog post (dunno if you saw this) Play Minecraft with friends safely and securely
hth
For anyone looking for the same approach used by the Minecraft blog to publish a TCP or UDP port on a public IP, or wanting to know more about how it works, here's the zrok article about self-hosting a public, personalized frontend by running zrok access private on a VPS: Personalized Frontend | Zrok
One way to keep the private access frontend running as an always-on background service is with Docker: Docker Private Share | Zrok
Finally, if you need more control, there are also Docker and Linux options for hosting the whole zrok instance on your VPS: Self Hosting | Zrok