Exactly a couple of things that we (me and the wife) use really often:

• AdGuard Home is IMHO so much easier to use, although it has been a while since I’ve used Pi-Hole.
• CouchDB for the Obsidian LiveSync plugin
• Immich for a self hosted Google Photos alternative
• Nginx Proxy Manager for exposing all of my services
• Vaultwarden is invaluable for us

This is not Traefik’s fault though. It’s because of String literals in Go.

And with Cloudflare you could also only open up port 443, because Cloudflare will do HTTP ➡ HTTPS if you enable that in their settings.