I think the simplest setup is keeping all the apps and services on the local network and doing something like this guide so they are always behind a VPN. Then setup another VPN on unraid or another device to access from outside the local network. There are plenty of other guides for unraid and Plex and the arr stack out there, unraid is just what I use but can use whatever OS you would prefer.
I have a cloudflare tunnel setup for 1 service in my homelab and have it connecting to my reverse proxy so the data between cloudflare and my backend is encrypted separately. I get no malformed requests and no issues from cloudflare, even remote public IP data in the headers.
Everyone mentions this as an issue, and I am sure doing the default of pointing cloudflared at a http local service but it’s not the ONLY option.
This is me 5 times a day when I go fill up my water bottle, I get an email, use the bathroom or do something else quickly and go back to my desk and 15 minutes later go to drink water and realize I left it upstairs by the fridge.
Comcast / Xfinity. Have been forced to use their services for years until a viable alternative arrived in my neighborhood, paid $110 a month for internet to be down at least 2 days a month when my wife and I both work from home. All calls and tickets and emails were met with “you’re not using out router and we don’t see issues on our side, sounds like a you problem”.
Almost left for ancient Century Link pipe when internet was out for 17 hours one day, called 3 times and finally got a competent person on the line not saying the above. Instead said they had done maintenance in my neighborhood and when they sent someone out to look at the uplink it was magically working again. Filed for a service refund thing since it was way below the promised availability and I had to reschedule meetings because my hotspot was slow and they gave me a $1.35 refund to my $110 bill that month.
Yep, those datacaps are complete nonsense and they know it. My bill was so high because I had to pay for unlimited data because 2 people working from home and streaming videos almost everyday always goes over their cap.