Reputation: 4634
I use standalone version of keycloak in docker-based application.
Since Keycloak 1.9.2 there is an "auth-server-url-for-backend-requests" attribute removed from keycloak properties.
This field was by me to indicate the internal ip address of auth server (inside a dock). The external one (auth-server-url) is used for redirection purpose.
My question is: how to replace former auth-server-url-for-backend-request to solve a problem of having different network addresses inside docker and outside of it.
Upvotes: 11
Views: 3631
Reputation: 5339
You should set the KEYCLOAK_FRONTEND_URL
parameter in the Dockerfile
or docker-compose.yml
(if you use them). In other case your should set this parameter in Keycloak General
settings UI.
It is quite tricky because you shouldn't set the real front-end's URL, however you should set the URL which is used by front-end. I have the same problem so you can see some examples in my SO question/answer
Upvotes: 1
Reputation: 8911
According to the following links, it appears you can use the same DNS for external requests as you would for internal. See these:
http://keycloak.github.io/docs/userguide/keycloak-server/html_single/index.html#d4e4114
Upvotes: 1