http://lbrdtjaj7567ptdd4rv74lv27qhxfkraabnyphgcvptl64ijx2tijwid.onion
The biggest concern for me is bruteforcing. If they can get to my login page, and I don't have anything set up to stop them from bruteforcing my admin credentials, it will happen eventually right? My initial though process was to set up Access policies in cloudflare, and after getting started on that, I was able to achieve an Access login page when testing on one of my domains.