I'm basically using Cloudflare Tunnels to host not only this website but a lot of selfhosted apps too.
I bought my domain with Google Domains, which is now Squarespace. Then I let Cloudflare handle all the DNS for my domain (I probably should have just bought that domain on Cloudflare directly but well, it is what it is).
I have multiple security policies, this way I can control who has access to my services.
Since anyone can access this webpage, I had to basically make a hole into my security policies. Good thing Cloudflare lets me secure the admin portal for Grav 😁.