Putting cloudflare etc in front of webflow breaks how webflow does their lets encrypt renewal (they use HTTP, not DNS), so after ~90 days the site goes offline unless you allow un-encrypted origin connections.