SSL issue with NPM, PiHole, Cloudflare.

I am setting up sparkyfitness on my basic homelab. The app requires https, so I figured I could set that up real quick. Should be easy since I have an external facing domain, right? The idea is that I'd use nginx and pihole local dns records to do local subdomains with my publicfacing domain. fitness.domain.com would redirect to my local sparkyfitness instance on my own network (with tailscale helping remotely). Got an SSL token from cloudflare, added it into nginx certificate with *.domain.com, and domain.