This is the way

The cloudflare tunnel is the reverse proxy in this case. No particular need to run another. Are you using the docker cloudflared to set up the tunnel?

In my case, I use NGINX that connects to the cloudflare side and parse everything out from there, and I haven’t used the cloudflared docker, but I imagine that makes things easier. I set everything up before Cloudflare tunnels were a thing, so I didn’t really want to rejigger everything. If were doing it from scratch, I’d probably go with Cloudflare.

Inb4 the Cloudflare is Bad and is a MITM attack people. Yes, it is, but it’s about opportunity cost. I’m not doing anything I care that Cloudflare sees, so I’m fine using it for simplicity sake, and I imagine they do a better job of security than I do, and I can manage stuff on a well configured dashboard instead of a command line. I’m more interested in blocking people who AREN’T cloudflare from screwing with my shit than I am in keeping Cloudflare out of my business. I use a VPN for things I don’t want to run through Cloudflare (like Torrents).

I have up on Pihole a long time ago because of constant issues. Went with self hosted AdGuard and haven’t had a single issue since.

I don’t quite understand why you are paying someone else to host your data? At that point, just use one of the major cloud services…

That’s why I finally gave up after nearly 3 decades of running my own email server. It’s just stamping out fire after fire and my time became way more valuable as I got older.

Yes, Hexbear is highly customized. Beehaw is o believe. Not sure what else

The fact that you said “my router doesn’t appear on file explorer” tells us everything we need to know about your skill level. You don’t know the first thing about “protecting this open port” and you aren’t qualified to assess the security risks of what you are trying to do.

My go to is Roku.

Cheap, always works, compatible with everything