1. Log in to dash.cloudflare.com and open Zero Trust
2. Go to Networks → Tunnels and click Create a tunnel
3. Choose Cloudflared, name it meshcore, and click Save
4. On the Install connector screen, copy the tunnel token (the long string shown after --token)

In your Cloudflare tunnel settings, go to Public Hostnames and add these three routes. Use HTTP as the type for all three.

Once your token is saved and hostnames are configured in Cloudflare, start the tunnel connector. It will automatically reconnect if the server reboots.

Once the tunnel is running and hostnames are configured, you can reach your stack from anywhere:

Cloudflare Zero Trust Access lets you put a login gate in front of your services — only approved email addresses can connect.

1. In Zero Trust go to Access → Applications
2. Click Add an application → Self-hosted
3. Set the domain to *.yourdomain.com (or your domain)
4. Add a policy with your email address

Anyone else hitting your URLs will see a Cloudflare login page instead of your services.