<div dir="ltr"><div id="descriptionmodule" class="" style="margin:15px 0px 0px;padding:15px 0px 0px;border-top-style:none"><div class="" style="margin:5px 0px 0px;padding:0px 0px 0px 10px"><div id="description-val" class="" style="margin:0px;padding:0px"><div class="" style="margin:0px;padding:0px"><p style="margin:0px;padding:0px">Hiya</p><p style="margin:0px;padding:0px"><br></p><p style="margin:0px;padding:0px">We&#39;ve been running v1.9.2 behind a nginx proxy for some time now. Has the setup for running Keycloak v2.0.0-Final behind a proxy changed? ... We&#39;ve kept the amended lines, but Keycloak is returns content in non-https appearing to ignore the X-Forwarded-Proto</p><p style="margin:10px 0px 0px;padding:0px">—<br>&lt;http-listener name=&quot;default&quot; socket-binding=&quot;http&quot; proxy-address-forwarding=&quot;true&quot; redirect-socket=&quot;proxy-https&quot;/&gt;<br>...<br></p><p style="margin:10px 0px 0px;padding:0px">&lt;socket-binding name=&quot;ajp&quot; port=&quot;${jboss.ajp.port:8009}&quot;/&gt;</p><p style="margin:10px 0px 0px;padding:0px">&lt;socket-binding name=&quot;http&quot; port=&quot;${jboss.http.port:8080}&quot;/&gt;</p><p style="margin:10px 0px 0px;padding:0px">&lt;socket-binding name=&quot;https&quot; port=&quot;${jboss.https.port:8443}&quot;/&gt;</p><p style="margin:10px 0px 0px;padding:0px">&lt;socket-binding name=&quot;proxy-https&quot; port=&quot;443&quot;/&gt; &lt;---</p><p style="margin:10px 0px 0px;padding:0px">...</p><hr><p style="margin:10px 0px 0px;padding:0px">But looking at the urls handed back, they are all http://</p><p style="margin:10px 0px 0px;padding:0px"><br></p><p style="margin:10px 0px 0px;padding:0px">Doing a tcpdump dump between proxy and keycloak, I can see the X-Forwarded headers added by the proxy</p><p style="margin:10px 0px 0px;padding:0px">GET /auth/admin/master/console/ HTTP/1.0<br>X-Real-IP: 127.0.0.1<br>X-Forwarded-For: 127.0.0.1<br>X-Forwarded-Proto: https<br>Host: 127.0.0.1<br>Connection: close<br>Cache-Control: max-age=0<br>Upgrade-Insecure-Requests: 1<br>User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36<br>Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,<b>/</b>;q=0.8<br>Accept-Encoding: gzip, deflate, sdch, br<br>Accept-Language: en-US,en;q=0.8</p></div></div></div></div><div id="activitymodule" class="" style="margin:15px 0px 0px;padding:15px 0px 0px;border-top-style:none"><div id="activitymodule_heading" class="" style="margin:0px;padding:0px;background:url(&quot;data:image/png&quot;)"><ul class="" style="margin:2px 0px 0px;list-style-type:none;padding:0px;float:right;color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px"></ul><h2 class="" style="padding:0px 5px 0px 20px;color:rgb(36,52,70);font-size:inherit;line-height:1.5;display:inline-block;font-family:Arial,sans-serif;background-image:url(&quot;&quot;)"></h2></div></div></div>