# Pomerium Verify

Pomerium Verify is a self-hosted Docker container for the Pomerium Verify service, used to provide identity verification in Pomerium Zero deployments. It is open source and self-hosted, installable on Docker Hub and Unraid.

Canonical page: https://ourlocalhost.com/app/1124/pomerium-verify

## Description

Pomerium Verify is a self-hosted Docker container for the Pomerium Verify service, used to provide identity verification in Pomerium Zero deployments.

## Platform availability

Available on 1 of 9 platforms: Unraid.

## Links

- Docker Hub: https://hub.docker.com/r/pomerium/verify/
- Official website: https://www.pomerium.com/
- Unraid: https://ca.unraid.net/apps/pomerium-verify-15yv7pn0lmz4o7?q=Pomerium-Verify

## Common questions

### Do I need anything besides the Pomerium-Verify container in Kubernetes?

Yes, install the base Pomerium Zero deployment first. Without it, Pomerium-Verify has no base Pomerium resources to connect to.

### What must be ready before running the mutual TLS Docker Compose example?

Provide real values for CERTIFICATE, CERTIFICATE_KEY, and COOKIE_SECRET, mount an edited config file, and leave ports 443 and 8443 open. Without a valid certificate and cookie secret, secure connections and login sessions may not work, and blocked or used ports block access.

### Does Pomerium still add value if the target app already has login?

It can protect apps without built-in authentication, but it adds an extra sign-in step for apps like Nextcloud.

### Should the Pomerium proxy be colocated with the apps?

A Pomerium maintainer says self-hosting the proxy directly where the apps run can improve performance and data tenancy.

### Does Pomerium support hardware-backed device identity?

Yes, Pomerium v0.16 supports hardware-backed device identity via WebAuthn.

## Alternatives

- OAuth2 Proxy: OAuth2 Proxy is a flexible, open-source reverse proxy that protects your services with OAuth2 / OpenID Connect login, validating users by e…
- pocket-id: A simple OIDC provider that allows users to authenticate with their passkeys to your services.

---
Source: Our Local Host (https://ourlocalhost.com/app/1124/pomerium-verify), the self-hosted and open-source app directory.