I think there’s a bug when using Tunnels and public networks.
When you add a public network via a tunnel in zero trust (this is HTTP), then remove the public network, then add it again. The system claims it can’t add the public network as there is an existing DNS entry. Tunnels adds a bridge entry into the DNS record.
When I check the DNS the entry doesn’t exist. Something is stuck in a database somewhere.