Given the guide does not mention it, I would go with tunnel only.
I’m just used to the idea that when there is a server on a home network, you need to route the traffic somehow. Perhaps the Cloudfare set up and choice of port sorts that out automatically somehow. (anyone feel free to chime in here!)