← Directory

Pomerium-Verify

Pomerium Verify container

  • Network Services
  • Tools & Utilities
Pomerium Verify container

Platform availability

Available on 1 of 9 platforms

  • Unraid
  • TrueNAS (not listed)
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox (not listed)
  • Helm (not listed)
  • Mac (not listed)
  • Windows (not listed)
  • Linux (not listed)

Health score

Not enough data yet for a health score. It needs at least 2 of 4 factors: maintenance, popularity, ease of install, resource needs.

Availability: platform listings confirmed today, links checked 7 days ago

No GitHub repository data collected yet.

Resources & Compatibility

ARM (e.g. Raspberry Pi) is supported.

Checked 14 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Install the base Pomerium Zero If you are using Kubernetes (a system for running containers on a cluster), run the provided command-line kubectl apply command to install the base Pomerium Zero deployment. Without it, Pomerium-Verify has no base Pomerium resources to connect to, and the command uses the changing main branch rather than a fixed release. source
  • Set certificates and secrets first Before starting the Docker Compose setup (a set of containers started from a recipe file), provide real values for CERTIFICATE, CERTIFICATE_KEY, and COOKIE_SECRET, and mount a config file (make your local config.yaml available inside the container) that you have edited. Without a valid certificate and a cookie secret, Pomerium cannot make a secure connection or keep login sessions reliable. source
  • Open ports 443 and 8443 Leave port 443 open for Pomerium and, if you are running the mutual TLS (two-way certificate) example, leave port 8443 open for that service. If these ports are blocked or already used, your browser or other apps will not be able to reach the service. source

Fetched 14 days ago - each note links to its source

Alternatives (2)

  • OAuth2 Proxy - OAuth2 Proxy is a flexible, open-source reverse proxy that protects your services with OAuth2 / OpenID Connect login, validating users by e…
  • pocket-id - A simple OIDC provider that allows users to authenticate with their passkeys to your services.

Checked today - source: AlternativeTo

Common questions

Do I need anything besides the Pomerium-Verify container in Kubernetes?

Yes, install the base Pomerium Zero deployment first. Without it, Pomerium-Verify has no base Pomerium resources to connect to.

What must be ready before running the mutual TLS Docker Compose example?

Provide real values for CERTIFICATE, CERTIFICATE_KEY, and COOKIE_SECRET, mount an edited config file, and leave ports 443 and 8443 open. Without a valid certificate and cookie secret, secure connections and login sessions may not work, and blocked or used ports block access.

Does Pomerium still add value if the target app already has login?

It can protect apps without built-in authentication, but it adds an extra sign-in step for apps like Nextcloud.

Should the Pomerium proxy be colocated with the apps?

A Pomerium maintainer says self-hosting the proxy directly where the apps run can improve performance and data tenancy.

Does Pomerium support hardware-backed device identity?

Yes, Pomerium v0.16 supports hardware-backed device identity via WebAuthn.

Answers sourced from github.com, github.com, www.reddit.com, www.reddit.com, www.reddit.com

Community

Collected 8 days ago - public community threads