Reverse Proxy setup

I am unable to setup my tunnel to go to a reverse proxy, as documented and depicted here https://localxpose.io/docs/tutorials/use-localxpose-with-traefik#architecture.
I have attempted both npm and traefik with same results. I have tried with docker, docker-compose, and windows. Same results.

So, I know dns and reverse proxy are working as expected, I can set an A record to point to my WAN IP, set a CNAME to point to A record. Forwarding 80 and 443 traffic to my reverse proxy, which then takes me to the intended service, when entering myapp.mydomain.tld.

I can also use my reverse proxy setup with Cloudflare Tunnel.

Setting up the tunnel I feel like Tony Stark, and have tried every combination, every permutation there is to configure. I started out on docker/docker-compose but it was slower to troubleshoot and try different combinations, so moved to windows with a config file. So according to the article in the link I would need a reserved wildcard domain:

I have reserved my wildcard domain *.mydomain.tld

I have a CNAME of ‘myapp’ and target is the generated link ‘somerandomid.cname.loclx.io’

And back to the article I should run the tunnel with following settings:

tunnel -r http --reserved-domain "*.example.com" --to traefik:80

Since I am running in windows (for now) and have my reverse proxy and apps already setup elsewhere I don’t need the rest of the setup.

Based on the above, one of my many config.yml files settings looked like:

traefik:

type: http

region: us

to: http://192.168.1.10:80

reserved_domain: ‘*.mydomain.tld’

http://192.168.1.10:80’ is my reverse proxy, the same that I would port forward to or point my cloudflare tunnel to.
I have also tried ‘https://192.168.1.10:443’ which is another viable option with port forward or cf tunnel.

I have tried plugins like https_redirect: true or host:myapp.mydomain.tld or host:mydomain.tld or host:*.mydomain.tld.

I have tried changing the reserved_domain to my root domain, which is also reserved and adjusting cname as needed.

As well as many other things I could think of to attempt to get it working.

Pointing the tunnel directly at one of my services, that is not my reverse proxy and bypassing the proxy…works… but this is not the goal.

Any help would be appreciated.