I could use some help accessing AdGuardHome outside my network

[daniellwdb]

The problem: I would like to access my AdGuardHome instance securely outside my home on my devices, but I am overwhelmed by the possibilities and lack some networking understanding.

My setup: I have a Raspberry Pi with static IP 192.168.1.145. On this device I set up a simple Docker Compose service:

services:
  adguardhome:
    image: adguard/adguardhome
    restart: unless-stopped
    network_mode: host
    volumes:
      - ${DATA_DIR}/adguardhome:/opt/adguardhome/work
      - ${CONFIG_DIR}/adguardhome:/opt/adguardhome/conf

In my router I then set a static DNS server pointing to 192.168.1.145. This works fine. Any device inside my network now has ads blocked.

Now I also own a domain, say mydomain.dev. I am using Cloudflare as my DNS for this domain. I am just stuck on my next steps. I have been trying to reverse engineer this blog post and got as far as being able to generate certificates by adding a caddy service and this Caddyfile:

dns.mydomain.dev

reverse_proxy adguardhome:80

tls me@mydomain.dev {
  dns cloudflare {env.CLOUDFLARE_API_TOKEN}
  resolvers 1.1.1.1
}

encode zstd gzip

Unfortunately the blog post does not go into the details of what to configure on the AdGuardHome / Cloudflare side so I do not understand what I can do with these running services.

I guess my question is: How can I continue from this setup or can you suggest an alternative way to tackle my problem?