I wish to be able to reach my instance of Whoogle when away from home, so I set a Cloudflare tunnel following this guide.
[Setting Up Cloudflare Tunnels on Umbrel]
I set two tunnels up, one for mempool and other for whoogle.
The mempool one is working flawlessly.
The Woogle one doesn’t work. It seems to reach out to Umbrel but keeps loading forever and eventually fails.
It seems Whoogles blocking outside connections, but Im not an expert…
I don’t know anything about Cloudflare tunnels.
But have you tried to use Tailscale to access it remotely instead? That will allow you to access anything on your umbrel remotely from devices that are connected to your Tailscale tailnet.
This is possible and easy to get running by installing Tailscale on your Umbrel and the device you will use to access Whoogle when away from home.
Once complete simply go to your Umbrel’s Tailscale IP (which will look something like 100.xxx.xxx.xxx and add on the port number for Whoogle, which by default is 6420
The only snag I’ve hit so far is you have to login using your Umbrel’s login password. I’ve not found a way yet to have this passed by the server as part of a config file, but would be very interested to learn if someone has managed this.
Posting here to +1 this issue. Can’t seem to figure out why Whoogle doesn’t work thru a Cloudflare tunnel. Back when I rolled my own home server via Docker this wasn’t an issue so I can’t figure out why this is happening via Umbrel.
I just setup Cloudflare Tunnel and applications like Nextcloud, Vaultwarden, and Jellyfin work great…but Immich and Whoogle both do not work. Do you guys think it could be the Umbrel’s SSO that is breaking it? (I am still learning and not a expert at this so sorry if that is a dumb question)
If anyone needs it still I someone else mention it.
Go into the docker-compose.yml file and add the PROXY_AUTH_ADD: “false” command. This is bypass Umbrel’s sign in page. A huge downside is there is no protection so anyone can access it but I was able to get Whoogle working with Cloudflare Tunnel this way.
Another add on to fix anyone accessing your website with authentication after the step above.
In the Zero Trust dashboard, go to Access > Applications and create a self-hosted application. You can use this to add email authentication to your site. For example I have my Whoogle site set every month to request my email to send a 6-digit pin to before I am allowed to access the site. You can limit this is only specific email addresses as well, so I have my entire custom domain and my wife’s Gmail allowed, and that’s it. I went a step further and limited inbound traffic to the site from within my country only as well.