LetsEncrypt forward to server

[N0_Klu3]

So currently I have LetsEncrypt setup with nginx on my server (unRAID).
The docker get the SSL and applies it to my domain (hosted on Cloudflare).
Now I'm thinking to bring that forward to my router and use the router to forward those connections to my other docker containers.

Eg, Emby/Sonarr/Radarr and what not.
Or actually maybe just externally facing items, Emby and Nextcloud and the rest I can access via VPN.

Does anyone have a guide on how to use OPNsense to get SSL cert and take a domain emby.mydomain.com and forward it to a container or IP Address?