Comment by charcircuit

He offloads TLS to the Proxmox server within their home network. TLS is used between that server and Cloudflare to keep everything safe during transport.