mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-25 00:32:15 +00:00
4930870504
# Which Problems Are Solved - The proxy examples are updated so a self-hosted login container is deployed. - The proxies are configured to direct traffic at /ui/v2/login to it. # How the Problems Are Solved The base compose file is extended by correctly configured login containers for all three scenarios - TLS disabled - External TLS - TLS Enabled The proxy always connects to the login via HTTP. # Additional Changes - All proxies have the TLS disabled mode outcommented, because the login container has state problems, maybe because it needs secure cookies. The need for this is unclear, so we avoid creating a follow-up issue. - The httpd external mode is incommented, as gRPC connections work with this configuration. - *ZITADEL* is replaced by *Zitadel* # Additional Context - Partially Closes #10016 --------- Co-authored-by: Copilot <[email protected]> Co-authored-by: Stefan Benz <[email protected]>
24 lines
1.0 KiB
Plaintext
24 lines
1.0 KiB
Plaintext
---
|
|
title: Configure Zitadel with Cloudflare
|
|
sidebar_label: Cloudflare
|
|
---
|
|
|
|
## Settings
|
|
|
|
- [Make sure HTTP/2 is enabled](https://support.cloudflare.com/hc/en-us/articles/200168076-Understanding-Cloudflare-HTTP-2-and-HTTP-3-Support)
|
|
- [Verify that gRPC is enabled](https://support.cloudflare.com/hc/en-us/articles/360050483011-Understanding-Cloudflare-gRPC-support)
|
|
- [Verify that traffic is proxied through cloudflare](https://developers.cloudflare.com/dns/manage-dns-records/reference/proxied-dns-records/)
|
|
- [Configure Zitadel to use the TLS Mode enabled](/self-hosting/manage/tls_modes#enabled)
|
|
|
|
:::info
|
|
[Cloudflare does only support gRPC with TLS!](https://support.cloudflare.com/hc/en-us/articles/360050483011-Understanding-Cloudflare-gRPC-support)
|
|
:::
|
|
|
|
## Troubleshooting
|
|
|
|
If something is not working please check the cloudflare WAF rules for potential violations.
|
|
These two rules are known to be triggered:
|
|
|
|
- 100001 Anomaly:Header:User-Agent - Missing Cloudflare Specials
|
|
- 100004 Anomaly:Header:User-Agent, Anomaly:Header:Referer - Missing or empty
|