If you're using cloudflare zero trust tunnels, check out this wrapper: https://github.com/remcoros/cloudflared-startos

Side-load it, configure your API key. Then use the cloudflare tunnels dashboard (Public Hostnames) to add routes to your services.

This is how I expose BTCPayServer on https://lnpay.me including Nostr plugin for zaps, works great!