traefik works well with docker and doing both http and DNS acme proofs with many providers. tunnel, point DNS to tunnel, set up reverse proxy, first container is whoami, once that's reachable, configure traefix to give whoami a cert. rinse and repeat for each service. make it easy on yourself and also use a client cert so only a cert holder gets in. otherwise do a waf. I'm for hire BTW.

I'm using nixos, so I could setup cloudflared in my nix config. But yeah. I would need to setup the certs and look into that to make it work.

use docker compose to spin up a cloudflared tunnel container and that will do what you want most easily. the docs are on cloudflare's site. it's a client-initiated tunnel to their front-end and you point your domain at their internal address that is your tunnel. its not difficult but ymmv. its basic networking for understanding the parts and processes involved in running a reverse proxy behind that too. the tunnel is the easiest part imnsho. setting up your certs and waf and security are gonna be the more difficult pieces.

Just to provide an update, someone in programming.dev suggested docker containers so I am researching that now. Thanks

Haha, maybe I expressed myself too formally.

This reads like an ad written by AI disguised as a post

What do you usually use in emergencies? Looking for recommendations and tips.