1. Running cloudflared without credential file.

```bash
cloudflared tunnel token <tunnel-name>
cloudflared tunnel run --token <tunnel-token>
```

2. Adding a sub domain to a tunnel

```bash
cloudflared tunnel route dns <tunnel-name> <sub-domain>
```

- If it is assigned to another tunnel then we can only go and delete on the dashboard.

3. Cloudflared config file

```yml
tunnel: <tunnel-name>
credentials-file: <credential-file-path>

ingress:
  - hostname: git.example.com
    service: http://localhost:3000

  - hostname: git.ssh.example.com
    service: ssh://localhost:22

  - service: http_status:404
```