I prefer Tailscale to expose via a very cheap cloud VM with a reverse proxy running at this point, I don’t really trust Cloudflare as far as I can throw it.