Internal DNS not working on WARP +tunnel

First time deployment…

We setup a tunnel and configured the WARP client. Routing by IP works great, but we can’t get the internal/fallback domain portion working. One thing that maybe is an issue is making sure the tunnel is in QUIC mode? But for the life of me, can’t get cloudflared to work properly. Even “tunnel list” throws errors about certs (despite the tunnel being up and running…deployed via the quick command on dashboard).

Where do I start?