i grabbed my public IP from my office and then blocked it. i was then still able to connect from my office. my set up is pretty simple. cloudflare front end, swag proxy and apps behind that. i have the real ip docker mod added to swag for traffice coming from cloudflare.