use docker compose to spin up a cloudflared tunnel container and that will do what you want most easily. the docs are on cloudflare's site. it's a client-initiated tunnel to their front-end and you point your domain at their internal address that is your tunnel. its not difficult but ymmv. its basic networking for understanding the parts and processes involved in running a reverse proxy behind that too. the tunnel is the easiest part imnsho. setting up your certs and waf and security are gonna be the more difficult pieces.