ok, so if mydomain.com is managed through cloudflare
but you cannot enable proxy on the root because e.g. it is squarespace and does not work very well
you can define subdomain nostr.mydomain.com
point it to mydomain.com with CNAME and proxy switched on
and then you can access your NIP5@nostr.mydomain.com
maybe not ideal but seems to be working just fine