to hide real server? from privacy side, again absolutely no. From technical side, better to set it for minimal paranoid mode as possible because cloudflare itself breaks federation
@suika@a1ba You can buy one more VPS and configure nginx proxy or just NAT on it. Guard VPS will forward traffic between wild Internet and your real server