The 3rd option worked. Thanks for your help!

https://imgur.com/a/y2KdPNf

These are the options I’ve found related to NAT reflection. After enabling the first option, I’m no longer taken to the GUI but I’m not hitting the web server either. Enabling the second makes no difference.

I mean from the same LAN.

I have NameCheap as well. I was trying to set this up with the ddclient on OPNSense but the logs suggested it couldn’t connect to NameCheap. What do you need to authenticate other than the DDNS passcode supplied by NameCheap?

Where are the settings for these tunnels located in Cloudflare? I was looking around the website last night but didn’t have any luck.

I have NameCheap as well. I found their Windows client after I made this post. I’m still curious is there are better services out there. It seems Cloudflare may have the best tools for security for a webserver, i.e. hiding the real IP address.

Here we go down another rabbit hole… 😆