

Well yes, it is one hop, because you’ve got the router doing TLS termination. Inside your network you point to the server that has the TLS certs. Outside of the network you do port forwarding, or use a tunnel with cloudflare agents.
Why is the router involved at all? It’s all local traffic. The external traffic comes through the cloud flare tunnel, right? Maybe I’m not understanding the architecture you’ve got.
Yes, neonicotonoids probably kill bees.
But if we want to be taken seriously, we need to be knowledgeable about the subject. Neonicotonoids are a class of insecticides. Roundup is a herbicide (glyphosate). They can both be bad, but they are bad in different ways.