I plan to write a blog about this. But the gist is that CloudFlare lets you host a service locally which creates a port tunnel between a domain on their platfor

I plan to write a blog about this. But the gist is that CloudFlare lets you host a service locally which creates a port tunnel between a domain on their platform and your box. This handles a lot of things, such as 2-factor auth, floating-IPs and TLS. So you visit "home-git.example.com" and CloudFlares routes that to your homebox.