We want to setup our puppet server behind a cloudflare proxy however with the mtls enabled on puppet, Network team concluded that this is not a straight forward solution. could you help with use cases or solutions that are already in place for such or POC already performed to achieve this solution.