The Cloudflare proxy only supports HTTP/HTTPS (unless you use Cloudflare Spectrum). You’ll need to use a sudomain (such as ssh) that is not proxied for your SSH access. You can then leave your domain proxied for web requests.
Alterntatively, use a tunnel with WARP.
Use only Full (strict) to ensure the connection between Cloudflare and your origin is fully secured.