<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">We have some docs here:<br>
<a class="moz-txt-link-freetext" href="https://keycloak.gitbooks.io/server-installation-and-configuration/content/v/2.1/topics/clustering/load-balancer.html">https://keycloak.gitbooks.io/server-installation-and-configuration/content/v/2.1/topics/clustering/load-balancer.html</a><br>
<a class="moz-txt-link-freetext" href="https://keycloak.gitbooks.io/server-installation-and-configuration/content/v/2.1/topics/network.html">https://keycloak.gitbooks.io/server-installation-and-configuration/content/v/2.1/topics/network.html</a>
(and subpages)<br>
<br>
Marek<br>
<br>
On 07/09/16 11:37, Predrag Mijatovic wrote:<br>
</div>
<blockquote
cite="mid:FFE2192B-0E5A-4140-970E-AAD7A6D45D12@gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div class="">
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">Hello,</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"><br class="">
</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">I need help with Keycloak over HTTPS...I've started
Keycloak with</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">"./standalone.sh -b 10.45.0.6". I have DNS name <a
moz-do-not-send="true" href="http://login.mysite.com"
class="">login.mysite.com</a> which points to</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">NGINX listening on a public IP. NGINX is set up as
a reverse proxy:</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"><br class="">
</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">server {</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> ssl on;</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> listen 443;</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> server_name <a moz-do-not-send="true"
href="http://login.mysite.com" class="">login.mysite.com</a>;</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> ssl_verify_client off;</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> proxy_ssl_server_name on;</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"><br class="">
</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> location / {</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> proxy_set_header X-Real-IP $remote_addr;</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> proxy_set_header Host $host;</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> proxy_set_header X-Forwarded-For
$proxy_add_x_forwarded_for;</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> proxy_set_header X-Forwarded-Proto https;</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> proxy_pass <a moz-do-not-send="true"
href="http://10.45.0.6:8080" class="">http://10.45.0.6:8080</a>;</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"> }</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">}</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"><br class="">
</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">I can successfully open <a moz-do-not-send="true"
href="https://login.mysite.com/auth/" class="">https://login.mysite.com/auth/</a> (green
padlock and</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">everything), but <a moz-do-not-send="true"
href="https://login.mysite.conf/auth/admin/master/console/"
class="">https://login.mysite.conf/auth/admin/master/console/</a> fails
with</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">"{{notification.header}} {{notification.message}}
Loading...". Inspecting the</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">web page I see that a lot of .js files are served
over HTTP and the browser</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">complains about mixed content.</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"><br class="">
</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">Reading the docs I figured that setting stuff on
the side of reverse proxy is</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">enough? Do I need to do anything else?</span></font></div>
</div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);"><br class="">
</span></font></div>
<div class="" style="orphans: 2; widows: 2;"><font class=""
face="-apple-system, BlinkMacSystemFont, Segoe UI, Roboto,
Helvetica, Arial, sans-serif, Apple Color Emoji, Segoe UI
Emoji, Segoe UI Symbol" color="#333333"><span class=""
style="font-size: 14px; background-color: rgb(255, 255,
255);">Thanks</span></font></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<p><br>
</p>
</body>
</html>