Thanks, I think I’ve stumbled across the answer, I have a container running a ddns ip update every day and it wasn’t set to proxied.
The answer (I hope) was found in this thread:
Googling didn’t pick that thread up, my Google foo must be off today 
1 Like