Simple Connection via Cloudflare Tunnel

I'm trying to create the simplest possible configuration with Cloudflare Tunnel connecting to traefik on my unRaid docker system through a docker called CloudflaredTunnel

My tunnel is set as: tunnel.example.com with the service being https://192.168.2.2:44301 which is my unraid server and the port that traefik listens to. Does that seem right so far?

If so, do I need to port forward 44301, or does CloudflaredTunnel bypass the need for that?

Thanks, Richard