c3d2/nix-config
c3d2/nix-config
23
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

add httpPort 8080 and set bindAddress to localhost

Browse Source
This commit is contained in:
Tony Boston 2021-10-16 20:19:44 +02:00
parent fec49f21dc
commit f9c134ad94
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
hosts/containers/keycloak/default.nix
View File

@ -29,11 +29,11 @@ in
forceSSL = true; forceSSL = true;
enableACME = true; enableACME = true;
locations."/" = { locations."/" = {
proxyPass = "https://127.0.0.1:8443"; proxyPass = "http://127.0.0.1:8080";
# proxyWebsockets = true; # proxyWebsockets = true;
}; };
locations."/auth" = { locations."/auth" = {
proxyPass = "https://127.0.0.1:8443/auth"; proxyPass = "http://127.0.0.1:8080/auth";
# proxyWebsockets = true; # proxyWebsockets = true;
}; };
}; };
@ -48,6 +48,8 @@ in
inherit (pkgs.keycloak-secrets) initialAdminPassword; inherit (pkgs.keycloak-secrets) initialAdminPassword;
frontendUrl = "https://${frontendDomain}/auth"; frontendUrl = "https://${frontendDomain}/auth";
forceBackendUrlToFrontendUrl = true; forceBackendUrlToFrontendUrl = true;
httpPort = "8080";
bindAddress = "127.0.0.1";
# sslCertificate = "/var/lib/acme/${frontendDomain}/fullchain.pem"; # sslCertificate = "/var/lib/acme/${frontendDomain}/fullchain.pem";
# sslCertificateKey = "/var/lib/acme/${frontendDomain}/key.pem"; # sslCertificateKey = "/var/lib/acme/${frontendDomain}/key.pem";
database.passwordFile = builtins.toFile "db_password" dbPassword; database.passwordFile = builtins.toFile "db_password" dbPassword;