My ISP blocks incoming data on ports 80 and 443. I also require a Dynanic DNS to handle my changing IP address. The only way I found to obtain a Let’s Encrypt certificate is through a DNS challenge in this situation.

I can definitely run without Cloudflare but I won’t have SSL which will affect federation.