I just opened up the product page for "Cloudflar Zero Trust", which is full of CxE fuzz speak. It seems to be a hosted VPN?

So your solution for self hosting is to use a VPN not self hosted?