https://developers.cloudflare.com/cloudflare-one/connections...
Basically, you can have a computer available online through Cloudflare without having to open any ports, as it makes the computer available through outbound connections. Should also make it possible to host behind CGNAT.