So my post was the one to get rid of the cloudflare tunnel.
Basically I set up a tailscail docker on my home server and connected it with a one time key from tailscale. There I exposed my local network. (Perhaps secure that only to your homeserver IP)
Then I set up a Debian Server which hosts a lot of other stuff. But there I also installed tailscail and connected it to my account.
After this the most important part! I wasted hours to find this line of code sudo tailscale up --accept-routes
With that you allow the external server to accept routes. Otherwise you can't redirect to your homeserver
The next step I took was to install nginx and setup a reverse proxy to my traefik docker on my home network
Here I routed the domain with every subdomain (*.your.domain) to my homeserver.
My homeserver took care of the https certificate so my nginx server only redirects traefik from port 80.
I can share my configs later but I have a little problem with large nextcloud uploads. And I don't have the previously working nginx config anymore.... So I need to dig a bit further again.
Ask me questions, but I can only answer them in about 7h Hope my late night writing makes sense.
The problem is with nextcloud on my end. Some files just can't get synced and bigger files won't even go through. Perhaps something is misconfigured, but I think I red something, that cloudflare tunnels only support x gb of traffic at once.