Lanie Molinar Carmelo<p><strong>Help Needed with Cloudflare Zero Trust, Pages, and Workers for ReactFlux + MiniFlux Setup</strong></p><p>Hi everyone, </p><p>I'm new to <strong><a href="https://allovertheplace.ca/tags/Cloudflare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cloudflare</span></a></strong> and have been trying to set up a <a href="https://allovertheplace.ca/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SelfHosted</span></a> project on my <strong><a href="https://allovertheplace.ca/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>RaspberryPi</span></a> 500</strong>. I'm mostly self-taught, so I apologize if I misunderstand anything or miss important details. Here's my situation: </p><p><strong><strong>Current Setup</strong></strong></p><ul><li>I'm running the self-hosted <strong><a href="https://allovertheplace.ca/tags/RSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>RSS</span></a> feed reader</strong> <strong><a href="https://allovertheplace.ca/tags/MiniFlux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MiniFlux</span></a></strong> on my Raspberry Pi 500 (<strong><a href="https://allovertheplace.ca/tags/ArchLinuxARM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ArchLinuxARM</span></a></strong>, installed via Pacman).<br></li><li>The setup uses <strong><a href="https://allovertheplace.ca/tags/Caddy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Caddy</span></a></strong> as a reverse proxy, a <strong><a href="https://allovertheplace.ca/tags/CloudflareZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CloudflareZeroTrust</span></a> tunnel</strong>, and <strong>Cloudflare Access</strong> for SSO.<br></li><li>My <strong><a href="https://allovertheplace.ca/tags/CloudflareAccess" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CloudflareAccess</span></a></strong> application is configured to allow all origins, methods, and headers. It has a policy that allows specific emails or login methods (e.g., GitHub).<br></li></ul><p><strong><strong>What I'm Trying to Do</strong></strong></p><ul><li>I want to deploy <strong>ReactFlux</strong>, an alternative frontend for MiniFlux, on <strong><a href="https://allovertheplace.ca/tags/CloudflarePages" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CloudflarePages</span></a></strong>.<br></li><li>Before setting it up fully, I tested the <a href="https://reactflux.pages.dev/login" rel="nofollow noopener noreferrer" target="_blank">ReactFlux demo</a> with my MiniFlux instance at <code>https://rss.laniecarmelo.tech</code>. However, ReactFlux couldn't log in.<br></li></ul><p><strong><strong>Suspected Issue</strong></strong></p><p>I believe the issue is caused by <strong>Cloudflare Access protection</strong> blocking ReactFlux from accessing the MiniFlux API (<code>https://rss.laniecarmelo.tech/v1/*</code>). </p><p><strong><strong>What I've Tried So Far</strong></strong></p><ol><li>I added another hostname (<code>rss.laniecarmelo.tech/v1/*</code>) to my tunnel configuration and created a new Cloudflare Access application with a policy set to "Bypass" for everyone. However, this didn't work—when testing the API endpoint in a private browser window, I'm still asked to sign into Cloudflare.<br></li><li>I also tried setting up the hostname with "Protect with Access" turned off but got the same results.<br></li><li>Next, I attempted to use a <strong><a href="https://allovertheplace.ca/tags/CloudflareWorker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CloudflareWorker</span></a></strong> written in JavaScript to bypass authentication for <code>/v1/*</code>, but it doesn't seem to be doing anything (or isn't being triggered).<br></li></ol><p><strong><strong>What I Need Help With</strong></strong></p><ul><li>How can I properly configure Cloudflare so ReactFlux can access the MiniFlux API (<code>/v1/*</code>) while keeping the rest of my MiniFlux instance protected by Cloudflare Access?<br></li><li>I've been stuck on this for a couple of days and would really appreciate any guidance or suggestions!<br></li></ul><p>Thanks in advance for your help! </p><p><a href="https://allovertheplace.ca/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SelfHosting</span></a> <a href="https://allovertheplace.ca/tags/ArchLinux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ArchLinux</span></a> <a href="https://allovertheplace.ca/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Linux</span></a> <a href="https://allovertheplace.ca/tags/RSSReader" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>RSSReader</span></a> <a href="https://allovertheplace.ca/tags/tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>tech</span></a> <a href="https://allovertheplace.ca/tags/technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>technology</span></a> <a href="https://allovertheplace.ca/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>RaspberryPi</span></a> <a href="https://allovertheplace.ca/tags/RPi" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>RPi</span></a> <a href="https://allovertheplace.ca/tags/RPi500" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>RPi500</span></a> <a href="https://allovertheplace.ca/tags/RaspberryPi500" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>RaspberryPi500</span></a> <br><span class="h-card" translate="no"><a href="https://a.gup.pe/u/selfhosting" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>selfhosting</span></a></span> <span class="h-card" translate="no"><a href="https://lemmy.ml/c/selfhost" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>selfhost</span></a></span> <span class="h-card" translate="no"><a href="https://lemmy.world/c/selfhosted" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>selfhosted</span></a></span></p>