You could also put it behind a cloudflare proxy subdomain, right? That way it looks like the origin ip comes from cloudflare

Can you tell me why someone would need port forwarding with a VPN? Genuinely don’t know.