Keycloak fails with 404 error

H2-invent / open-datenschutzcenter

Open Source Datenschutzmanagement System

https://open-datenschutzcenter.de

GNU Affero General Public License v3.0

34 stars 10 forks source link

Keycloak fails with 404 error #226

Open jonas2515 opened 10 months ago

jonas2515 commented 10 months ago

We're trying to setup open Datenschutzcenter on Ubuntu 22.04 LTS here and ran into a few issues with the install scripts:

the commands to generate a random string from /dev/urandom never return, what works instead of cat is dd if=/dev/urandom count=1 2>/dev/null as that specifies the number of bytes to be read.
after the install is done, the containers get started and the services should be available. When accessing the service, a redirect to keycloak.domain.tld happens as expected, but that returns a 404 error. We tried with both the "prod" and the "dev" installations as well as "http" and "https".

holema commented 10 months ago

Hello @jonas2515,

I will try to reproduce the error. The last time I started the installation script it worked. Did you start the installation script with http and then change to https?

Try to completly clean up your installation by

docker-compose down -v
bash installOdcDocker.sh

jonas2515 commented 10 months ago

Did you start the installation script with http and then change to https?

Nope, tried to completely re-run it a few times with different configurations, none of them worked I'm afraid? What's the recommended settings? For me "prod" and "http" would be good, as it's supposed to run behind a reverse proxy.

holema commented 10 months ago

Hello @jonas2515,

We suggest du run the installation directly with the traefik reverse proxy to the internet. I think that your reverse proxy is doing the ssl termination. Is the domain only internal accessable?

holzi1005 commented 9 months ago

Hello @jonas2515 ,

I would recommend to still to prod and https because http is only working together with dev. That is a limitation of symfony, because in prod, the login must be over https. However, the reverse proxy must have an valide certificate to use prod again.