<div dir="ltr"><p style="font-size:12.8px;margin:0px;padding:0px">Hiya</p><p style="font-size:12.8px;margin:0px;padding:0px"><br></p><p style="font-size:12.8px;margin:0px;padding:0px">We&#39;ve been running v1.9.2 behind a nginx proxy for some time now. Has the setup for running Keycloak v2.0.0-Final behind a proxy changed? ... We&#39;ve kept the amended lines, but Keycloak is returns content in non-https appearing to ignore the X-Forwarded-Proto</p><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px">—<br>&lt;http-listener name=&quot;default&quot; socket-binding=&quot;http&quot; proxy-address-forwarding=&quot;true&quot; redirect-socket=&quot;proxy-https&quot;/&gt;<br>...<br></p><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px">&lt;socket-binding name=&quot;ajp&quot; port=&quot;${jboss.ajp.port:8009}&quot;/&gt;</p><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px">&lt;socket-binding name=&quot;http&quot; port=&quot;${jboss.http.port:8080}&quot;/&gt;</p><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px">&lt;socket-binding name=&quot;https&quot; port=&quot;${jboss.https.port:8443}&quot;/&gt;</p><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px">&lt;socket-binding name=&quot;proxy-https&quot; port=&quot;443&quot;/&gt; &lt;---</p><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px">...</p><hr style="font-size:12.8px"><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px">But looking at the urls handed back, they are all http://</p><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px"><br></p><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px">Doing a tcpdump dump between proxy and keycloak, I can see the X-Forwarded headers added by the proxy</p><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px">GET /auth/admin/master/console/ HTTP/1.0<br>X-Real-IP: 127.0.0.1<br>X-Forwarded-For: 127.0.0.1<br>X-Forwarded-Proto: https<br>Host: 127.0.0.1<br>Connection: close<br>Cache-Control: max-age=0<br>Upgrade-Insecure-Requests: 1<br>User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36<br>Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,<b>/</b>;q=0.8<br>Accept-Encoding: gzip, deflate, sdch, br<br>Accept-Language: en-US,en;q=0.8</p><p style="font-size:12.8px;margin:10px 0px 0px;padding:0px">Rohith</p></div>