Cloudflare Tunnel

I’m trying to set up a Cloudflare Tunnel for my Minecraft Java server on Ubuntu 22.04. I’ve already created a tunnel and a config like this:
tunnel: <my-tunnel-id>
credentials-file: /root/.cloudflared/<credentials-file>.json
ingress:
- hostname: mc.example.com
service: tcp://localhost:25565
- service: http_status:404
The tunnel is running as a systemd service (cloudflared) and appears active.
The Minecraft server listens on port 25565 and works locally.
I’ve tried adding the Public Hostname in the Zero Trust dashboard (TCP → localhost:25565).
DNS for mc.example.com points to Cloudflare (proxied).
Problem: External connections always time out when I try to connect.
I’m looking for advice on what might be wrong or if there’s a step I’m missing for traffic to actually reach my Minecraft server through Cloudflare.

Thanks in advance!