Does not work through cloudflare dns proxy

[viqasc]

Reproduction steps

i have pocket-id working on a reverse proxy (ngx proxy manager) used the header sizes settings that was listed in the documentation.

when i have cloudflare proxy turned off i am able to access the sso tool. when i turn on the cloudflare proxy i get a Error 502 Bad Gateway.

please let me know if cloudflare needs to support the larger header sizes too therefore unsupported.

Expected behavior

Hoping that it would work with the cloudflare proxy

Actual Behavior

when cloudflare proxy is switched on i receive an error 502 Bad Gateway

[stonith404]

Is the bad gateway error returned by Cloudflare or your reverse proxy?

Do you have other services behind Cloudflare and Nginx Proxy Manager that work? Just to make sure that the issue is caused by Pocket ID.

[kmendell]

I'll confirm i have pocket id running behind cloudflare tunnel and it works fine not sure if that's what's being used or not here though

[viqasc]

@kmendell thank you for your input, under the SSL/TLS settings for your domain select Configure menu Is it set to Full (strict) ?

[kmendell]

@viqasc Yes mine is. Are you using public DNS Records pointing to Pocket ID? or are you using Cloudflare Tunnel (Zero Trust)?

[stonith404]

I'm converting this to a discussion as this is not a bug of Pocket ID directly.

[viqasc]

It turned out the app stopped running the whole time. I am embarrassed to say I didn’t check it before submitting the ticket.

Thank you all for your responses.

But to confirm in case anyone sees this. it does work using Cloudflare proxy + nginx proxy manager (with the headers modifiers listed in the readme)