Configure ZITADEL with Cloudflare

Settings

• Make sure HTTP/2 is enabled
• Verify that gRPC is enabled
• Verify that traffic is proxied through cloudflare
• Configure ZITADEL to use the TLS Mode enabled

info

Cloudflare does only support gRPC with TLS!

Troubleshooting

If something is not working please check the cloudflare WAF rules for potential violations. These two rules are known to be triggered:

• 100001 Anomaly:Header:User-Agent - Missing Cloudflare Specials
• 100004 Anomaly:Header:User-Agent, Anomaly:Header:Referer - Missing or empty