🐛 Bug Report: Does not work through cloudflare dns proxy #400

Closed
opened 2025-10-08 00:07:01 +03:00 by OVERLORD · 5 comments
Owner

Originally created by @viqasc on GitHub.

Reproduction steps

i have pocket-id working on a reverse proxy (ngx proxy manager) used the header sizes settings that was listed in the documentation.

when i have cloudflare proxy turned off i am able to access the sso tool. when i turn on the cloudflare proxy i get a Error 502 Bad Gateway.

please let me know if cloudflare needs to support the larger header sizes too therefore unsupported.

Expected behavior

Hoping that it would work with the cloudflare proxy

Actual Behavior

when cloudflare proxy is switched on i receive an error 502 Bad Gateway

Originally created by @viqasc on GitHub. ### Reproduction steps i have pocket-id working on a reverse proxy (ngx proxy manager) used the header sizes settings that was listed in the documentation. when i have cloudflare proxy turned off i am able to access the sso tool. when i turn on the cloudflare proxy i get a Error 502 Bad Gateway. please let me know if cloudflare needs to support the larger header sizes too therefore unsupported. ### Expected behavior Hoping that it would work with the cloudflare proxy ### Actual Behavior when cloudflare proxy is switched on i receive an error 502 Bad Gateway
OVERLORD added the bug label 2025-10-08 00:07:01 +03:00
Author
Owner

@kmendell commented on GitHub:

@viqasc Yes mine is. Are you using public DNS Records pointing to Pocket ID? or are you using Cloudflare Tunnel (Zero Trust)?

Image

@kmendell commented on GitHub: @viqasc Yes mine is. Are you using public DNS Records pointing to Pocket ID? or are you using Cloudflare Tunnel (Zero Trust)? ![Image](https://github.com/user-attachments/assets/3d3d6050-d1d8-4a78-9c8b-4e68bfa37fd9)
Author
Owner

@viqasc commented on GitHub:

@kmendell

thank you for your input, under the SSL/TLS settings for your domain select Configure menu

Is it set to Full (strict) ?

@viqasc commented on GitHub: @kmendell thank you for your input, under the SSL/TLS settings for your domain select Configure menu Is it set to Full (strict) ?
Author
Owner

@kmendell commented on GitHub:

I'll confirm i have pocket id running behind cloudflare tunnel and it works fine not sure if that's what's being used or not here though

@kmendell commented on GitHub: I'll confirm i have pocket id running behind cloudflare tunnel and it works fine not sure if that's what's being used or not here though
Author
Owner

@stonith404 commented on GitHub:

I'm converting this to a discussion as this is not a bug of Pocket ID directly.

@stonith404 commented on GitHub: I'm converting this to a discussion as this is not a bug of Pocket ID directly.
Author
Owner

@stonith404 commented on GitHub:

Is the bad gateway error returned by Cloudflare or your reverse proxy?

Do you have other services behind Cloudflare and Nginx Proxy Manager that work? Just to make sure that the issue is caused by Pocket ID.

@stonith404 commented on GitHub: Is the bad gateway error returned by Cloudflare or your reverse proxy? Do you have other services behind Cloudflare and Nginx Proxy Manager that work? Just to make sure that the issue is caused by Pocket ID.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pocket-id-pocket-id-1#400