Install Discourse on a residential internet with Cloudflare Tunnel

I’m new to all this, so pondering that these two instructions appear to conflict each other

On one hand, the suggestion is for the tunnel to communicate with discourse via http://localhost:80 but then the setting forces everything via https?

Is the recommendation to work locally on port 80 without SSL, since the tunnel will provide SSL handshake at the edge, and then tunnel to localhost can be without certificate?

I can set up a local certificate with renewals via caddy. Is there a way to provide a config for the key and cert into app.yml?

Perhaps I’m misunderstanding what search has turned up for me regarding DISCOURSE_FORCE_HTTPS: true and it’s reflective of links/images being instructed to load via https and has nothing to do on which port/mode Discourse itself runs?