Got it, nginx/Ory Oathkeeper seems like a possible workaround although using Ory Proxy was absolutely the easiest way to start development with dockerized Kratos and local services. We will be kinda missing the functionality 😢

I have a docker compose with traefik, kratos, etc.. I can share it if you need something "quick"

The only thing we currently need is a local proxy that will serve both kratos and our app, which run is not inside of a docker but on a host machine. If your docker-compose can do it, we would be glad to look at it.

yeah, so I use traefik — my traefik discovers services that are run in docker, but for our app (javascript stuff with live-reload), it has a static backend pointing to the host:

[http]
  [http.routers]
    [http.routers.ui]
      entryPoints = ["http"]
      service = "ui"
      rule = "Host(`<http://ui.domain.127.0.0.1.nip.io|ui.domain.127.0.0.1.nip.io>`)"
  [http.services]
    [http.services.ui]
      [http.services.ui.loadBalancer]
        [[http.services.ui.loadBalancer.servers]]
          url = "<http://host.docker.internal:3000>"

my Kratos' public base URL is at

<http://kratos.domain.127.0.0.1.nip.io|kratos.domain.127.0.0.1.nip.io>

— and I have CORS enabled in

kratos.yml

Awesome, thanks!

i might add oathkeeper later too as we use that in staging/prod

No, I set

kratos.domain….

I operate them each on sub domains to replicate what I get with ory cloud.

Yes, sorry, I’ve just noticed that you’ve already wrote what you set the base url to 😅