vm1

Served by nginx in Docker on vm1 (10.10.10.21:8080), proxied by Traefik on the edge VM, reached over the Cloudflare tunnel.

If you are reading this over HTTPS with no certificate warning, the whole chain works: WARP → tunnel → cloudflared → Traefik → this container.