Bunny Shield works

Beats using Cloudflare, except DNS might be on Cloudflare. Not using their DNS, my domain registrar’s DNS.

But not exactly free, you need a pull zone or whatever it’s called. I wouldn’t pay around $9 a month for every site as well. Unless it gets a lot of traffic, and makes a lot of money.

Use an ALIAS for the root domain, and CNAME for www. When adding the zone on Bunny, use the IP address. I was trying to use their DNS, until I figured out I can just use the IP.