evry / docker-oidc-proxy

Docker Image built on Alpine Linux for secure OpenID Connect (OIDC) proxy authentication
https://hub.docker.com/r/evry/oidc-proxy/
MIT License
121 stars 59 forks source link

Persistent keycloak #16

Open sagivoulu opened 4 years ago

sagivoulu commented 4 years ago

The keycloak container isn't persistent... The keycloak client secret is known only after creating the client, but when the docker-compose file is running you can't change the env vars of the proxy container... once you change the environment variable you need to restart the compose file, which restarts keycloak and resets the client.

What I did is i added a persistent postgres container & set keycloak to use the postgres db.

elysweyr commented 4 years ago

This is neither a problem connected to this proxy solution nor related to keycloak. The problem here is your individual configuration. It's not a surprise that the secrets stay the same after having a common persistent container setup.