Cloudflare tunnel and reverse proxy will only connect by relay

This is an up-to-date Plex docker on Unraid.

I’ve been playing with this damn thing for probably the last 8 hours to no avail, so I figure it’s time to get the experts involved. I followed this guide to the letter. I’ve checked and double checked every setting. Nothing works. I’ve never been able to get it to just port forward either, so this may be a Unraid/docker thing all together, but it’s driving me wild. I know that it’s setup correctly, I can reach my domain perfectly and connect securely through that, but as soon as I bring an app or the web player into the situation and shut off relay, it’s done.

Just to hedge some of those questions I know are going to be asked:
Yes I attached :443 to the end of the custom URL
Yes the custom URL is there
They’re all on the same isolated tunnel sub-net that I created for them
Yes, everything has the correct http/https protocol attached
My certs are good and cloudflare is seemingly good.

Hopefully someone has experience in this before I lose my mind