I used to have all my services reverse-proxied on port 8443, since my ISP doesn’t allow me to open port 443.
I have since switched to Cloudflare tunnels and they work great, only real “issue” is that somewhow, all my services are now both available on port 443 AND 8443, mind you I have already closed port 8443 on my router/modem, removed the firewall rule in my server and removed the docker container running my NginxReverseProxy. I mean it works either way, but it kinda bothers me.
I’ll explain how I have things set up, maybe that could help: All my services are hosted on docker with docker-compose, the containers that need to be tunneled all live on the same bridge docker network along with the Cloudflare tunnel container itself.