Forwarding / restrictions with cloudflare to only ONE dashboard

I have set up a static redirection via cloudflare, which points to ht***://xxx.ui.nabu.casa/dashboard-heatpump/0 using a wildcard test. (so I have not solved it via CNAME entry).
This works. I have created a ‘test’ user in HA. All other dashboards are set up so that the test user cannot access them.

However, there is still the problem that has been known for years that the user still sees entries such as logbook, calendar, entities.
Can I create a rule from cloudflare that automatically redirects everything back to the heat pump dashboard when another link on the page is clicked? So that ONLY the link /heatpump/0 works?

Solved it with a redirection from an owned domain direct to the nabu casa link of the concerning dashboard, which I switched with HACS NemesisRE/kiosk-mode to the kiosk mode.