The capitalization was an accident. I just mean you deploy CF tunnel software in a separate container inside your application stack (I use docker compose, but you can use whatever) and basically forget about it.

Security-wise the attack surface is relatively small, but only you know your threat model and risk appetite.