# Scm-manager with cloudflare for https

**URL:** <https://community.cloudogu.com/t/scm-manager-with-cloudflare-for-https/1438>\
**Category:** SCM-Manager (General)\
**Created:** [February 4, 2025, 3:20am UTC](https://community.cloudogu.com/t/scm-manager-with-cloudflare-for-https/1438 "2025-02-04T03:20:41Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![emeee](https://dub1.discourse-cdn.com/flex013/user_avatar/community.cloudogu.com/emeee/32/1567_2.png) [@emeee](https://community.cloudogu.com/u/emeee)\
**Post date:** [February 4, 2025, 3:20am UTC](https://community.cloudogu.com/t/scm-manager-with-cloudflare-for-https/1438/1 "2025-02-04T03:20:41Z")

</div>

I updated from v2 to v3 recently. I did not setup the server’s ssl. However, the V2 can work with cloudflare and support https, when my domain is proxied by cloudflare. But for V3, the cloudflare https does not work. Any one has the same experience or any suggestions on how to fix it?

For https on cloudflare, I use this configuration:  
**Flexible**  
Enable encryption only between your visitors and Cloudflare. This will avoid browser security warnings, but all connections between Cloudflare and your origin are made through HTTP.

---

<div class="post-metadata">

**Author:** ![pfeuffer](https://dub1.discourse-cdn.com/flex013/user_avatar/community.cloudogu.com/pfeuffer/32/72_2.png) [@pfeuffer](https://community.cloudogu.com/u/pfeuffer)\
**Post date:** [February 5, 2025, 7:41am UTC](https://community.cloudogu.com/t/scm-manager-with-cloudflare-for-https/1438/2 "2025-02-05T07:41:48Z")

</div>

Hi @emeee !

Have you enabled forward headers in SCM-Manager? This has to be done explicitly in your `config.yml` for v3. For details, take a look here: [https://scm-manager.org/docs/3.7.x/en/administration/scm-server#reverse-proxy](https://scm-manager.org/docs/3.7.x/en/administration/scm-server#reverse-proxy)

If this does not help, please give us a hint.

---

<div class="post-metadata">

**Author:** ![christoph.loose](https://dub1.discourse-cdn.com/flex013/user_avatar/community.cloudogu.com/christoph.loose/32/1400_2.png) [@christoph.loose](https://community.cloudogu.com/u/christoph.loose)\
**Post date:** [February 5, 2025, 10:16am UTC](https://community.cloudogu.com/t/scm-manager-with-cloudflare-for-https/1438/3 "2025-02-05T10:16:08Z")

</div>

Hi @emeee ,  
just out of interest, why is your SCM Manager instance behind a Cloudflare firewall?

---

<div class="post-metadata">

**Author:** ![emeee](https://dub1.discourse-cdn.com/flex013/user_avatar/community.cloudogu.com/emeee/32/1567_2.png) [@emeee](https://community.cloudogu.com/u/emeee)\
**Post date:** [February 5, 2025, 10:23am UTC](https://community.cloudogu.com/t/scm-manager-with-cloudflare-for-https/1438/4 "2025-02-05T10:23:31Z")

</div>

Thank you. This works.

---

<div class="post-metadata">

**Author:** ![emeee](https://dub1.discourse-cdn.com/flex013/user_avatar/community.cloudogu.com/emeee/32/1567_2.png) [@emeee](https://community.cloudogu.com/u/emeee)\
**Post date:** [February 5, 2025, 10:25am UTC](https://community.cloudogu.com/t/scm-manager-with-cloudflare-for-https/1438/5 "2025-02-05T10:25:36Z")

</div>

I use cloudflare as the name server for my domain. If poxied, cloudflare will hide the IP address. It can also support https without the need to setup ssl in my server.

---

<div class="post-metadata">

**Author:** ![christoph.loose](https://dub1.discourse-cdn.com/flex013/user_avatar/community.cloudogu.com/christoph.loose/32/1400_2.png) [@christoph.loose](https://community.cloudogu.com/u/christoph.loose)\
**Post date:** [February 5, 2025, 11:01am UTC](https://community.cloudogu.com/t/scm-manager-with-cloudflare-for-https/1438/6 "2025-02-05T11:01:21Z")

</div>

Thanks for the insides!