NGINX Proxy Manager NPM handles internal reverse proxying only — mapping service.domain.internal hostnames to running containers. External traffic goes through Cloudflare Tunnels, not NPM. Pi-hole NPM + Pi-hole Running NPM alongside Pi-hole without port conflicts.