Does that use wireguard?

Pretty sure nostr:npub14mgq3zmg7wc4g5exw6yztlfaypapcvee06quc5msdqujpa6e5d4sztw00t packaged this for nostr:npub126ntw5mnermmj0znhjhgdk8lh2af72sm8qfzq48umdlnhaj9kuns3le9ll

Yes, I created a wrapper for the cloudflared client here: https://github.com/remcoros/cloudflared-startos

Set your cloudflare tunnel api key in the configuration and use the ZeroTrust dashboard of cloudflare to setup the tunnel/public hostname routes.