You can disable SSL by commenting the two templates in your YML file.
There should be a section like this in your YML File
Make sure it looks exactly as shown above and then it won’t try to issue an SSL certificate or expose Port 443.
You can do this by setting a reverse proxy and configuring that to use DNS challenge. However, Since you already have exposed discourse via cloudflare tunnel, You probably don’t need this.
Be sure to check the cloudflare tunnel documentation for discourse here for additional hints: