Maybe I'm trying somthing that is not even possible, but here's my situation:

I have setup NPM in a docker on an RPi. Multiple sub-domains, pointing to several dockers. I have created an access-list where I block external access and allow my internal IP addresses.

This all worked when I had my domain's DNS records hosted at my own provider. Now I've changed the DNS records towards CloudFlare. The public accessible sites still work, but for the Internal only sites, they get blocked, unless I add my WAN IP address to the access-list in NPM.

What I would like to see is that my internal IP address is recognized by NPM, but changing the DNS records towards CloudFlare has created some sort of hairpin, which screws up the access-list.

Should I go back to my own provider or is there a workaround, so my local addresses will get through to NPM again?