Troubleshoot Ory Console Lite

Most problems come from the service URLs that Ory Console Lite uses. It is stateless, so there is no cache to clear and no database to repair — correct the environment, restart the container, and reload the Settings page.

Ory Console Lite refuses to start

Set at least one of ORY_KRATOS_URL, ORY_HYDRA_URL, or both ORY_KETO_READ_URL and ORY_KETO_WRITE_URL. A URL without a scheme, or one using a scheme other than http or https, also fails. Check docker logs ory-console-lite.

ORY_KRATOS_PUBLIC_URL does not satisfy this requirement on its own, see Environment variables.

A service reads as unavailable on the Settings page

Ory Console Lite resolves service URLs from inside its own container, so http://localhost:4434 points it at itself. Use a hostname that resolves on the network of Ory Console Lite, such as a Docker service name, a Kubernetes service, or an internal DNS name.

A tab is greyed out

The service behind it is not configured. See Configure only the services you run.

Create identity is missing or fails

Set ORY_KRATOS_PUBLIC_URL. The dialog reads the identity schema from the Ory Kratos Identities public port, which the admin port does not serve.

Creating or editing a relationship fails

Set ORY_KETO_WRITE_URL as well as ORY_KETO_READ_URL. With only the read URL set, the Permissions feature reports itself as enabled and its create and edit controls stay active, but every write to Ory Keto Permissions fails.

Checking whether Ory Console Lite itself is up

To test the Ory Console Lite process independently of the services it manages:

curl http://localhost:3000/api/health

It answers ok whenever Ory Console Lite is running. It does not probe Ory Kratos Identities, Ory Hydra Authorization, or Ory Keto Permissions, so use the Settings page to check those.

Next steps

• Configuration — every environment variable, and how Ory Console Lite reaches your services
• Security — secure Ory Console Lite

Professional support?

Ory offers support for self-hosted Ory software through the Ory Enterprise License (OEL). Read more about the OEL here.