Cloudflare Access

ProxMan supports connecting to Proxmox servers that are protected behind Cloudflare Access. By using the Custom Headers feature in ProxMan, you can authenticate your requests through Cloudflare's Zero Trust network automatically.

How to Connect using Custom Headers

When adding or editing a server in ProxMan, you can configure custom headers that will be sent with every request to your Proxmox server. This allows you to bypass or authenticate with Cloudflare Access.

1. Generate a Service Token in Cloudflare

To allow ProxMan to authenticate automatically, you need to create a Service Token in your Cloudflare Zero Trust dashboard.

1. Log in to your Cloudflare Zero Trust dashboard.

2. Navigate to Access > Service Credentials.

3. Click Create Service Token.

4. Give your token a descriptive name (e.g., "ProxMan App").

5. Choose a duration for the token.

6. Once created, Cloudflare will provide you with a Client ID (CF-Access-Client-Id) and a Client Secret (CF-Access-Client-Secret). Copy these values immediately, as the secret will not be shown again.

2. Configure Cloudflare Access Policies

Ensure your Proxmox application in Cloudflare Access has a policy that allows traffic when the correct Service Token is presented.

1. Go to Access > Applications and select your Proxmox application.

2. Under the Policies tab, add a new policy (or edit an existing one).

3. Set the action to Service Auth.

4. In the Include rules, select Service Token and choose the token you created in the previous step.

5. Save the policy. Ensure the policy order is correct if there are multiple policies.

3. Add Custom Headers in ProxMan

Now, you need to add the Service Token credentials to your server configuration in ProxMan.

1. Open ProxMan and navigate to Add Server or edit an existing server.

2. Look for the Custom Headers section in the Advanced Options.

3. Tap Add Header to add the following two headers:

Header 1:

- Key: CF-Access-Client-Id

- Value: (Paste the Client ID from Cloudflare)

Header 2:

- Key: CF-Access-Client-Secret

- Value: (Paste the Client Secret from Cloudflare)

4. Save your server configuration.

ProxMan will now include these custom headers in all API requests, allowing it to successfully authenticate through Cloudflare Access and communicate with your Proxmox server securely.