Odoo on a computer in your office

Ronyxx reads Odoo over the internet, at a secure address that starts with https. If your team opens Odoo at an address like localhost:8069 or 192.168.1.20:8069, give it a secure address first. A free Cloudflare Tunnel does it in about 20 minutes once your domain uses Cloudflare, without opening anything on your office router.

Odoo.sh or Odoo Online? You can skip this page: your Odoo already has a secure address.

1. Have these ready

   • A free Cloudflare account.
   • Your company's domain, using Cloudflare for its DNS (moving it there can take a few hours). A new address such as odoo.yourcompany.com is added to it; your website and email are not changed.
   • The computer Odoo runs on, and an administrator login for it.

2. Create the tunnel

   In Cloudflare, go to Networking › Tunnels and select Create Tunnel. Name it odoo.

   Choose the computer's system (Windows, Mac or Linux) and run the install command Cloudflare shows on that computer. On Windows, run it in a Command Prompt opened as administrator. It installs as a service, so the tunnel starts again by itself whenever the computer restarts.

   Select Continue once Cloudflare sees it connected. The tunnel then shows Healthy.

3. Give Odoo its address

   Open the tunnel. Under Routes, select Add route, then Published application, and fill in:

   Hostname

   odoo, and your domain from the list

   Service URL

   http://localhost:8069

   Odoo now opens at https://odoo.yourcompany.com, with the padlock. If Odoo uses a port other than 8069, put that one instead.

4. Let only Ronyxx through

   Your Odoo should not be open to the whole internet. In Cloudflare's security settings for your domain, create a custom rule:

   When

   Hostname equals odoo.yourcompany.com, and IP source address is not in Ronyxx's addresses

   Then

   Block

   We give you Ronyxx's addresses when you set up (one for IPv4 and one for IPv6), or email [email protected] for them. If people open Odoo at this new address from outside the office, add their addresses to the rule too. In the office, they keep using Odoo as they always have.

   If Bot Fight Mode is on for your domain, turn it off: it can stop Ronyxx before your rule is checked.

5. Lock Odoo's front door

   In Odoo's configuration file (odoo.conf), set a long master password and hide the list of databases, then restart Odoo:

   admin_passwd = a long password only you know
   list_db = False

   If your Odoo holds more than one database and your team picks one when signing in, leave out the list_db line: the master password and the rule in step 4 still keep others out. Make sure every Odoo login has a strong password too. Ronyxx itself only ever reads, with the API key you give it.

6. Connect it in Ronyxx

   In the console, put https://odoo.yourcompany.com as the Odoo address. Ronyxx tests the connection before it saves anything, so you know straight away that it works.

7. Keep the computer on

   Ronyxx can only read Odoo while that computer is on and online, so turn off sleep on it. When it's off, Ronyxx tells people it can't reach Odoo right now. It never guesses a figure.

cloudflared tunnel --url http://localhost:8069

Cloudflare's own guide, if you want more detail: Cloudflare Tunnel, get started.