It's not entirely true what you said. I use cloudflare -> my Proxyserver -> my machines behind the Proxyserver

My Proxyserver has my own certificates loaded and terminates the SSL/TLS connection from cloudflare

Even if the data is passing through cloudflare cdn uses the cloudflare certificates my data is encrypted first using my own certificates from the Proxyserver

If you have other apps running correctly it means that is something with the archivist,have you tried changing the ip in docker compose file in the TA Host to change it to localhost or 127.0.0.1

I think it's a similar setup to mine, i use pihole as dns server to resolve internal hostnames also,in pi hole when adding hosts like archivist.home point it to the ip of your ngnixproxy, in the nignix proxy manager configure the proper hosts to point the request to( the archivist ip address and port) i also use ngnixproxy manager to load my own certificates and to forward all the traffic in https instead of http.

I will check it up, i have Stirlingpdf and I see it also has ocr support

I will check it up

Didn't know that,i use flameshot for screenshots,i will take a look thnx