So it appears to be that one cannot just take and use the cloudflare tunnels to map to your wireguard. (because cloudflare has its own vpn, right ? ( ͡° ͜ʖ ͡°) ). I found some github notes on what appears to be a way to extract WG key from the CF WARP thing and use it as simple setup. As usual this is deeper than it seems. 1h later, with shaking hands, Im compiling shady rust packages with nix build system 🌚️