keycloak apache2 setup on Oracle Linux #40864

zdavatz · 2025-07-01T14:31:55Z

zdavatz
Jul 1, 2025

Before reporting an issue

I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

No response

Describe the bug

There does not seem to be a default Apache Reverse Proxy Setup
I am doing
./kc.sh start --http-host=127.0.0.1 --http-enabled=true --http-port=9000 --hostname=https://kc.ywesee.ch:8443
The Apache Virtualhost Config is:

<VirtualHost *:443>
    ServerName kc.ywesee.ch

    # SSL Configuration
    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/kc.ywesee.ch/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/kc.ywesee.ch/privkey.pem

    # Proxy Configuration for Keycloak
    ProxyPreserveHost On
    ProxyPass /excluded !
    ProxyPass / http://127.0.0.1:9000/
    ProxyPassReverse / http://127.0.0.1:9000/

    # Error and Access logs
    ErrorLog /var/log/httpd/kc.ywesee.ch_ssl_error.log
    CustomLog /var/log/httpd/kc.ywesee.ch_ssl_access.log combined
</VirtualHost>

So far no response in the browser.
Seems like the Proxy does not reach keycloak.

Version

26.2.5

Regression

The issue is a regression

Expected behavior

Login should appear.

Actual behavior

No response.

How to Reproduce?

See above.

Anything else?

No response

zdavatz · 2025-07-02T12:06:54Z

zdavatz
Jul 2, 2025
Author

Ok, this seems to work for me:

./kc.sh start --https-certificate-file=/home/opc/software/keycloak-26.2.5/certs/keycloak.crt --https-certificate-key-file=/home/opc/software/keycloak-26.2.5/certs/keycloak.key --http-host=127.0.0.1 --http-port=8080 --http-enabled true --hostname=https://kc.ywesee.ch
Apache vhosts.conf on

<VirtualHost *:80>
    ServerName kc.ywesee.ch
    ServerAlias www.kc.ywesee.ch
    DocumentRoot /var/www/html/kc.ywesee.ch

    # Error and Access logs
    ErrorLog /var/log/httpd/kc.ywesee.ch_error.log
    CustomLog /var/log/httpd/kc.ywesee.ch_access.log combined

    # Directory permissions
    <Directory "/var/www/html/kc.ywesee.ch">
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    # Redirect to HTTPS
    Redirect permanent / https://kc.ywesee.ch/
</VirtualHost>

# HTTPS Virtual Host - Keycloak Proxy
<VirtualHost *:443>
    ServerName kc.ywesee.ch
    ServerAlias www.kc.ywesee.ch

    # SSL Configuration
    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/kc.ywesee.ch/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/kc.ywesee.ch/privkey.pem

    # Proxy Configuration for Keycloak
    ProxyPreserveHost On
    ProxyPass /excluded !
    ProxyPass / http://127.0.0.1:8080/
    ProxyPassReverse / http://127.0.0.1:8080/

    # Error and Access logs
    ErrorLog /var/log/httpd/kc.ywesee.ch_ssl_error.log
    CustomLog /var/log/httpd/kc.ywesee.ch_ssl_access.log combined
</VirtualHost>

0 replies

Navigation Menu

Repository navigation

keycloak apache2 setup on Oracle Linux #40864

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

keycloak apache2 setup on Oracle Linux #40864

Uh oh!

zdavatz Jul 1, 2025

Before reporting an issue

Area

Describe the bug

Version

Regression

Expected behavior

Actual behavior

How to Reproduce?

Anything else?

Replies: 1 comment

Uh oh!

zdavatz Jul 2, 2025 Author

zdavatz
Jul 1, 2025

zdavatz
Jul 2, 2025
Author