The daemon script is simpler, true. but usually you can just point your router at some dyndns URL and you could put an internal IP for that.

I think using the cloudflare API is the way to go. You could probably set up an internal service that translates your home router’s dyndns request to a cloudflare API call.

Now add a link “you want to go here” that links to gihtub.com

Out of curiosity: why are you putting vaultwarden behind a cloudflare tunnel?