Authentik Behind Cloudflare Zero Trust

[Jake-Simek]

Help Needed: Cloudflare Zero Trust + Authentik Tunnel Issue

Hey all,

I am a newbie to all this, so take it easy on me!
Any help is appreciated, I am at such a loss

I’m trying to put my services behind Cloudflare Zero Trust and authenticate them using Authentik. I’ve set up Zero Trust multiple times before, so I have some experience with that.

My Setup:

• Authentik is running behind Traefik and accessible at https://192.168.1.4/.
• I have Cloudflare Tunnel set up to present Authentik at auth.packethub.dev, pointing to https://192.168.1.4/.

The Issue:

Everything works fine when I run it locally, but when I try to access Authentik via the tunnel, I get the error: Request failed. Please try again later.

Relevant Logs:

{"auth_via": "unauthenticated", "domain_url": "192.168.1.4", "event": "/", "host": "192.168.1.4", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 65, "remote": "192.168.1.3", "request_id": "c57208afb58a41edb7e09de7c2b307fa", "runtime": 19, "schema_name": "public", "scheme": "https", "status": 302, "timestamp": "2025-02-03T17:08:01.914207", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"}
{"auth_via": "unauthenticated", "domain_url": "192.168.1.4", "event": "/flows/-/default/authentication/?next=/", "host": "192.168.1.4", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 65, "remote": "192.168.1.3", "request_id": "53b1fd3e1e3a4456abbfad1eff68e94b", "runtime": 25, "schema_name": "public", "scheme": "https", "status": 302, "timestamp": "2025-02-03T17:08:02.080896", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"}
{"auth_via": "unauthenticated", "domain_url": "192.168.1.4", "event": "/if/flow/default-authentication-flow/?next=%2F", "host": "192.168.1.4", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 65, "remote": "192.168.1.3", "request_id": "0e1b096e8d894354809e53274277fd5b", "runtime": 43, "schema_name": "public", "scheme": "https", "status": 200, "timestamp": "2025-02-03T17:08:02.305355", "user": "", "user_agent": "Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0"}