Cloudflare ssh tunnels using tailscale

[Ijackedupmycode]

Description

i set my keys and everything up and was wondering the last bit i'm having trouble with is ssh git pull/pushes behing a cloudflare domain.
mainly due to i want let friends in but not if they have a

git clone [email protected]:username/test.git

but more so behind a cloudflare ssh
git pull [email protected]:username/test.git
using my unraid and i tried on my nuc in reg docker but no luck on this last piece of the puzzle.
DOMAIN = 192.168.0.xxxx
SSH_DOMAIN = sub.domain.com
HTTP_PORT = 3000
ROOT_URL = https://sub.domain.com/
DISABLE_SSH = false
SSH_PORT = 22
SSH_LISTEN_PORT = 22
LFS_START_SERVER = true

Gitea Version

1.22.3

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

mainly i can ssh pulls using my tailscale ip easy day.

but when i go into cloudflare zero trust and make a sud.domain.com > ssh:// tails-ip
i get an error and my instance goes down.

Git Version

1.22.3

Operating System

unraid docker

How are you running Gitea?

unraid docker

Database

PostgreSQL