Summary of cloudflare services used:

• Cloudflare DNS
• Email routing (forwarding emails from contact@andriusdalgeda.uk to personal email)
• Zero trust:
  • Tunnels (exposing private resources to the internet via the cloudflared daemon)
  • Access Applications & Policies (Enforcing MFA and region restrictions to tunnels)

Zero Trust

Cloudflared daemon/Tunnel running within a docker container on the host VM

Tunnel bound to an Access application (in this case https://homepage.andriusdalgeda.uk/)

Access Application has linked policies enforcing MFA in the form of a OTP delivered via email as well as geo-restrictions