Nextcloud Zero Trust

[nickelle1313]

What is the name of the domain?

Example.com

What is the issue you’re encountering

I’m using Cloudflare Access policies on my Nextcloud subdomain to enforce PIN authentication before accessing the service, ensuring that the UI remains protected. With this setup, I can authenticate and access Nextcloud through a browser without any issues. However, when using the Nextcloud app, there doesn’t seem to be a way to satisfy the authentication requirement. Is there a policy I can configure to allow the Nextcloud app to bypass authentication and or use another policy to ‘okay’ the source of nextcloud apps?

What is the current SSL/TLS setting?

Full (strict)

[Laudian]

You could use the WARP login as your authentication method.

You could use a Split Tunnel configuration so that only traffic to your Nextcloud is run via the WARP app:

Split Tunnels · Cloudflare Zero Trust docs

Using WARP posture checks with Cloudflare Access

This tutorial explains how to enable WARP client posture checks and use them in an Access application policy. Enabling the “Warp” and “Gateway” selectors The “Warp” and “Gateway” selectors are not visible in the policy creator by default and must be manually enabled. Fortunately, this is quite simple and can be done in only a few steps. In the Zero Trust dashboard navigate to Settings → WARP Client → Device posture. [Screenshot 2023-01-04 at 09.18.24] In the “WARP client checks” section, c…

[nickelle1313]

@Laudian

configuration

WARP client as the authentication method for the win! Security first!