sr2/ansible-collection-core
4
0
Fork 0
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity Actions

feat(podman_keycloak): nginx enhancements (buffering + DNS)
Some checks failed
Ansible Lint Check / lint (push) Failing after 57s
Details

Browse source 
* lookup of the keycloak container is at runtime to allow for
  the keycloak container being restarted while nginx is running
* increased buffer sizes to permit for larger signed SAML exchanges
  (was required for Google Workspace)
This commit is contained in:
Iain Learmonth 2025-11-30 15:02:51 +00:00
parent 57c58eb26a
commit e098840fab
1 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

12
roles/podman_keycloak/templates/nginx.conf
View file

@ -1,5 +1,12 @@
# {{ ansible_managed }}
resolver 10.89.0.1 ipv6=off valid=10s;
upstream keycloak {
zone keycloak_upstream 64k;
server keycloak:8080 resolve;
}
server {
listen 80;
listen [::]:80;
@ -28,12 +35,15 @@ server {
ssl_certificate_key /etc/letsencrypt/live/{{ podman_keycloak_keycloak_hostname }}/privkey.pem;
location / {
proxy_pass http://keycloak:8080/;
proxy_pass http://keycloak;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Port 443;
proxy_buffer_size 128k;
proxy_buffers 4 256k;
proxy_busy_buffers_size 256k;
}
}