Keycloak prod - Githubissues

CanDIG / CanDIGv2

The CanDIG v2 platform

GNU Lesser General Public License v3.0

15 stars 8 forks source link

Keycloak prod #672

Closed SonQBChau closed 2 months ago

SonQBChau commented 2 months ago

What's New

Updated Keycloak settings for production.
This PR assumes Keycloak is behind a reverse proxy, similar to the UHN setup, using HTTP traffic.
Cleaned up and improved debug mode.

How to Test

Run the integration tests on docker
For production, change the following

.env

CANDIG_PRODUCTION_MODE=1
KEYCLOAK_PUBLIC_PROTO=https
KEYCLOAK_PUBLIC_URL=${KEYCLOAK_PUBLIC_PROTO}://${CANDIG_AUTH_DOMAIN}
KEYCLOAK_PRIVATE_URL=${KEYCLOAK_PRIVATE_PROTO}://keycloak:${KEYCLOAK_PORT}

docker-compose

KC_PROXY_HEADERS: xforwarded # FOR PROD

SonQBChau commented 2 months ago

remove KEYCLOAK_CONTAINER_PORT
add CANDIG_PRODUCTION_MODE