Set exactly these permissions
Under Permissions, tap + Add more for each row until you have these five. Nothing else.
| Where | Setting | Exact value | Why |
|---|---|---|---|
| Permissions | Account | Cloudflare Tunnel → Edit | Create the tunnel from your server |
| Permissions | Zone | DNS → Edit | Add the app's address and the tunnel's SSH address |
| Permissions | Zone | Firewall Services → Edit | The one rule that lets only Fodide reach the server's SSH address |
| Permissions | Account | Account Settings → Read | Find your account id |
| Permissions | Zone | Zone → Read | Find your domain |