Skip to content

Private HTTP APIs

Any app in the catalogue that you add at your own address can be reached through a tunnel: a self-hosted Gitea, Grafana, Home Assistant, Odoo, or an internal service.

  1. Make sure the address is on the tunnel’s allow list, for example -allow erp.internal:8443.
  2. In the console, add the app and type its address.
  3. Under Reach it, choose the tunnel.

Private addresses such as 10.0.0.5 or erp.internal only work through a tunnel.

  • HTTPS works when the app’s certificate is from a public authority. A private certificate authority is not supported yet.
  • Plain http:// is off by default. You can turn it on per app, and only for an app reached through a tunnel.

Flowplane adds the app’s login to each request: the workspace’s, or each person’s own, depending on how the app signs in. The agent never sees it.

When you add an app at an address the tunnel does not allow yet, the console tells you. Run the new command it shows, or add the -allow entry yourself and restart the tunnel.