Hostname in Keycloack #146
Replies: 3 comments 4 replies
-
|
Yes, it's actually also here: so might be good replacement |
Beta Was this translation helpful? Give feedback.
-
|
replaced both with "http://<ec2_instance_Public_IPv4_address>/auth" and the Keycloak dashboard works as expected, previously I had to disable SSL inside the keycloak image stated in this guide: https://www.adaltas.com/en/2023/03/14/ec2-deploy-keycloak/ As I said, the Keycloak dashboard works, but when I try to reach for the manager app at /manager, if fails with an "invalid redirect URL" error at this URL:
Image: Logs: Do you have any ideas in mind? Im lost here |
Beta Was this translation helpful? Give feedback.
-
|
Will add SSL in #158 |
Beta Was this translation helpful? Give feedback.
-
|
managed to mount a reverse proxy with nginx mapping to 80 to 443 with a self signed certificate but OpenID does not like that either |
Beta Was this translation helpful? Give feedback.
-
|
SSL/TLS is now added in #158 - but you need to use signed certificates - I'm unsure how to make keyclock work with self-signed certificates. Happy to merge a PR if someone finds out |
Beta Was this translation helpful? Give feedback.
-
|
Opened a PR #170. I have written some docs based on my own experience trying to deploy this on EC2 instance |
Beta Was this translation helpful? Give feedback.
-
|
I recently faced similar challenges while setting up my application, and after a lot of trial and error, I found a solution that worked for me: Instead of making changes to Traefik or Keycloak, I focused on the domain configuration. By routing my domain (or subdomain in my case) through Cloudflare, I set the DNS to Proxy Off and enabled SSL in Flexible mode. This setup allowed me to access the application without any issues. Hopefully, this approach can help others who are struggling with similar problems. If anyone else has more tips or experiences to share, I'd love to hear them! |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Right now i'm testing the
multiple-deploymentsfeature in an EC2 instance. I'm thinking if it would be a good idea to inject a variable to replace the localhost in the multiple-deployments/docker-compose.yml file. As it is, traeffik (or keycloak?) has issues redirecting in a non local environments and is not possible to utilize it in other environments. The line would be:- traefik.http.middlewares.ragapp-keycloakopenid.plugin.keycloakopenid.KeycloakURL=http://localhost/authIn the docker-compose file.
Any thoughts?
Beta Was this translation helpful? Give feedback.
All reactions