I rebuilt my homelab ingress architecture using Cloudflare Tunnel, Nginx Proxy Manager, Docker bridge networks, and end-to-end TLS on a ZimaCube 2 to eliminate inbound exposure, segment traffic, and create a more modern self-hosting environment.