I was able to get this to work with Cloudflare Tunnels and setting up my own custom domain on Cloudflare with their free certificate and get it to do HTTPS Rewrite (and ignore the endpoint HTTPS validity as Cloudflare provides the certificate anyway) so that that the certificate is properly enabled. So that part is solved IMO. Clients can connect to the relay without needing a VPN. And it’s publicly available too. I can see in the Nostr Private Relay screen that it shows the wss link now. I don’t even really need a port number for it because I can map the domain directly to internal port 4848 (not sure if this is wise to do or not - ???)
However, is there a way to turn off the web interface for external connections, but possibly leave it on for LAN connections only (to check the status within the LAN)?
The reason for this is because I’d like to be able to set up multiple person accounts on this domain as NIP-05 DNS names (maybe even sell them for some sats like they do for snort.social) without those other users being able to see the status updates that appear on the main web page.