Cloudflare advanced
How to Run Cloudflare Tunnel in Front of Traefik
Expose Docker services through Cloudflare with no inbound ports open — cloudflared plus Traefik, the forwarded-header setting that trips people up, and how to verify the firewall is closed.