Look for cloudflare tunnel.

It basically adds an extra container to your stack that is on the same vlan as the other one, but connected to cloudflare. In cloudflare admin wgui you specify what port and container name to bridge to.

This sounds like a fun project to learn docker.