I believe I went with this a while ago (without the proxy setup u mentioned). I’m not sure if this applies to all firewalls (or maybe something in my setup)
but in my case with ufw, it’s worth mentioning docker bypasses ufw by default so you need to make sure to apply the rules to your internal docker ip’s as well.
It’s been a while but I can look further into details if you still need this, later this week.
And yes, Cloudflare tunnels are amazing! @itsbhanusharma