Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Christian Rebischke
infrastructure
Commits
22f38c26
Verified
Commit
22f38c26
authored
May 24, 2020
by
Sven-Hendrik Haase
Browse files
keycloak: Make sure Keycloak receives proper client IP
parent
93ba6a14
Changes
2
Hide whitespace changes
Inline
Side-by-side
roles/keycloak/templates/nginx.d.conf.j2
View file @
22f38c26
...
...
@@ -30,9 +30,12 @@ server {
location / {
access_log /var/log/nginx/{{ keycloak_domain }}/access.log main;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_ssl_verify off;
proxy_pass https://localhost:{{ keycloak_port }};
proxy_set_header Host $host;
proxy_ssl_verify off;
}
location = / {
...
...
roles/keycloak/templates/standalone.xml.j2
View file @
22f38c26
...
...
@@ -474,8 +474,8 @@
<subsystem
xmlns=
"urn:jboss:domain:undertow:10.0"
default-server=
"default-server"
default-virtual-host=
"default-host"
default-servlet-container=
"default"
default-security-domain=
"other"
statistics-enabled=
"${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"
>
<buffer-cache
name=
"default"
/>
<server
name=
"default-server"
>
<http-listener
name=
"default"
socket-binding=
"http"
redirect-socket=
"https"
enable-http2=
"true"
/>
<https-listener
name=
"https"
socket-binding=
"https"
security-realm=
"ApplicationRealm"
enable-http2=
"true"
/>
<http-listener
name=
"default"
socket-binding=
"http"
redirect-socket=
"https"
enable-http2=
"true"
proxy-address-forwarding=
"true"
/>
<https-listener
name=
"https"
socket-binding=
"https"
security-realm=
"ApplicationRealm"
enable-http2=
"true"
proxy-address-forwarding=
"true"
/>
<host
name=
"default-host"
alias=
"localhost"
>
<location
name=
"/"
handler=
"welcome-content"
/>
<http-invoker
security-realm=
"ApplicationRealm"
/>
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment