diff --git a/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf b/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf
index 54c05ab3b..72e92e3da 100644
--- a/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf
+++ b/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf
@@ -9,6 +9,7 @@ proxy_set_header X-Proxy-Secret $http_x_proxy_secret;
 # - Traefik forward auth
 # - oauth2_proxy
 # - Authentik
+# - Cloudflare Access
 
 proxy_set_header Remote-User $http_remote_user;
 proxy_set_header Remote-Groups $http_remote_groups;
@@ -23,3 +24,4 @@ proxy_set_header X-authentik-groups $http_x_authentik_groups;
 proxy_set_header X-authentik-email $http_x_authentik_email;
 proxy_set_header X-authentik-name $http_x_authentik_name;
 proxy_set_header X-authentik-uid $http_x_authentik_uid;
+proxy_set_header Cf-Access-Authenticated-User-Email $http_cf_access_authenticated_user_email;