The simplest option is start the service and then tunnel it using Cloudflare Tunnel [0] with your own domain. With this you won't have to expose port to public

The simplest option is start the service and then tunnel it using Cloudflare Tunnel [0] with your own domain. With this you won't have to expose port to public internet, and fiddle with your firewall and router. Then you can use Cloudflare DDoS protection and other offerings. [0] https://developers.cloudflare.com/cloudflare-one/connections/connect-apps https://developers.cloudflare.com/cloudflare-one/connections...