It works!

VM is live. Cloudflare tunnel is routing traffic correctly.