[keycloak-user] Keycloak behind reverse proxy Master realm access restrictions

[Leon K]

Hi Aaron,

I am not sure if it is OK to use s cross-reference between forums. But this
is my post on Stack Overflow:
https://stackoverflow.com/questions/55578690/keycloak-with-wildfly-application-behind-a-nginx-reverse-proxy

Thanks.

On Wed, Apr 17, 2019, 10:49 PM Aaron Harnly <keycloak-user at bulk.harnly.net>
wrote:

> Hi Leon, can you share the nginx config you are using?
>
> On Wed, Apr 17, 2019 at 1:45 PM Leon K <leon.kuper at gmail.com> wrote:
> >
> > Hello,
> >
> > Ubuntu 18.04
> > Keycloak 5.0
> > Nginx 1.15.8
> >
> > I have set up Nginx reverse proxy to proxy_pass to Keycloak server.
> > This post
> >
> http://lists.jboss.org/pipermail/keycloak-user/2015-September/003012.html
> > doesn't help me to protect access from the Internet to the Master realm
> it
> > does but with some caveats)
> > If I am using:
> > /auth/realms/{realm}/
> > /auth/realms/master
> > /auth/realms
> > /auth/admin/
> >
> > it can restrict access to the Master realm but the login screen is
> > different (see attached).
> > Can you help me with this issue?
> >
> > If it is not possible, I will stick probably to that ugly login screen
> > rather then expose the Master realm to the Internet hostility.
> >
> > Thank you.
> >
> >
> > <
> http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail
> >
> > Virus-free.
> > www.avg.com
> > <
> http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail
> >
> > <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
> > _______________________________________________
> > keycloak-user mailing list
> > keycloak-user at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-user
>