HTTPS on a custom domain with ACM and Cloudflare

I had the ECS Fargate service running behind an ALB (Application Load Balancer, the thing that distributes incoming traffic across your containers and does health checks on them), and the last piece w