[keycloak-dev] Setting up AJP proxy from Apache?

keycloak-1.9.0.Final Having trouble finding the right notes for setting up AJP. This is to run alongside a FreeIPA server which is already set up with mod_proxy_ajp talking to Tomcat, so I want to keep using the same set of modules. I can see keycloak-1.9.0.Final/standalone/configuration/standalone.xml <subsystem xmlns="urn:jboss:domain:undertow:3.0"> <buffer-cache name="default"/> <server name="default-server"> <http-listener name="default" socket-binding="http" redirect-socket="https"/> <host name="default-host" alias="localhost"> <location name="/" handler="welcome-content"/> <filter-ref name="server-header"/> <filter-ref name="x-powered-by-header"/> </host> </server> I'm assuming I need a line comparable to <http-listener name="default" socket-binding="http" redirect-socket="https"/> But for the AJP protocol. Perhaps ajp-listener? A line like this, perhaps? <http-listener name="default-ajp" socket-binding="ajp" scheme="http" /> https://docs.jboss.org/author/display/WFLY8/AJP+listeners I see at the bottom of the file: <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}"> <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/> <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/> <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>