dial tcp [::1]:80: connect: connection refused
Cloudflare Tunnel: 502 from a localhost Ingress, and a Redirect Loop That Switching SSL Mode Did Not Fix
A 502 came from the tunnel ingress pointing at http://localhost:80, which inside Docker is the cloudflared container itself; using the Compose service name (http://nginx:80) fixed