Reverse Proxy SSL

[WoodenBleachers]

I used to run a Netgear R7000 (Nighthawk AC1700) for a long time with FreshTomato.  When I was still running the stock firmware, I'm pretty sure it had custom DNS functionality.  But that was before I started self-hosting stuff.

Is the container running Nginx Proxy Manager running in host networking mode or bridge networking?  Regardless, both ports 80 and 443 need to be open on the HOST firewall.  Port 80 is used during the certificate request process.

If this is a Debian or Ubuntu based distro, "sudo ufw allow 80" and "sudo ufw allow 443" would open the firewall.  But UFW would need to be enabled if it isn't already.

I did have 80 and 443 open.  I found out though, although it was never documented or stated anywhere in the guides I had seen, that I am behind a CGNAT.  Because of this, I ended up just using a tunnel setup.  I went with cloudflare instead of tailscale funnel because the funnel is still in beta and was not configurable via a GUI.  I know it's probably a small grievance, but for $5 I figured it was that or Tylenol lol.

Thank you for your help, I'll likely do a writeup soon so that if anyone else encounters the exact same problems they'll have a solution.