Overview

Optional for Most Installations

This section covers advanced and optional topics. Most installations do not require these settings. Only proceed here if you have specific requirements for scaling, security hardening, or infrastructure optimization.

Overview

Advanced Topics covers optional configurations for:

  • Scaling Infrastructure: Load balancing, caching, performance optimization

  • Security Hardening: SSL, CSRF protection, trusted proxies

When you might need this section:

  • Running PteroCA at enterprise scale (100+ concurrent users)

  • High-security requirements

  • Custom infrastructure setup

  • Performance optimization needs

When you DON'T need this section:

  • Standard PteroCA installation

  • Small to medium hosting businesses

  • First-time setup

Topics Covered

Optimize PteroCA for high-traffic scenarios:

  • Load balancing across multiple servers

  • Redis caching for performance

  • Database optimization

  • CDN integration for static assets

When to use: 100+ concurrent users, multiple app servers

Security Hardening

Additional security configurations beyond basic security settings:

  • Configure HTTPS/SSL

  • Force HTTPS redirects

  • SSL certificate management

When to use: Production environments (strongly recommended)

  • Understanding CSRF tokens

  • Configuring CSRF protection

  • Troubleshooting CSRF errors

When to use: Already configured by default, this explains how it works

  • Configure trusted proxy IPs

  • Fix client IP detection behind proxies

  • CloudFlare integration

When to use: PteroCA behind reverse proxy, load balancer, or CloudFlare

Prerequisites

Before diving into advanced topics:

  • ✅ Complete basic installation: Installation

  • ✅ Core configuration finished: Core Configuration

  • ✅ System is working correctly

  • ✅ You have identified a specific need for advanced configuration

Do You Really Need This?

You might need advanced configuration if:

  • You're experiencing performance issues with many concurrent users

  • You have specific security compliance requirements

  • You're running a complex infrastructure setup

  • You're behind a reverse proxy or load balancer

You DON'T need advanced configuration if:

  • Your installation is working fine

  • You have < 100 concurrent users

  • You're just getting started

  • You haven't identified specific issues

Getting Help

Advanced topics can be complex. If you're unsure:

Last updated