• backup → /mnt/sda3/backup/keycloak_simon.bak
• keycloak_simon after deleting of logs weights only ~150 MB

• Change keycloak/standalone/configuration/themes/login/base/template.ftl
  • comment out logo
  • comment out “login to xyz-realm”
• In the admin console
  • In the realm “avril-realm”
    • in the application “avril-web”
      • in the settings
        • change Redirect URI to “/doit/*”
        • change Base URL to “/doit/index.html”
• …
• create path “/opt/avril/upload” for attachments and make it writable for the keycloak user (in our case “wildfly”)
  • it is fix because of source, but it if we change it in source it is also possible to make it flexible (through configuration in standalone.xml)

• copy wildfly file to /etc/init.d
• add user: sudo useradd wildfly
• change owner of all files in keycloak directory: sudo chown -R wildfly keycloak
• change owner of attachments directory: sudo chown -R wildfly /opt/avril/upload
• Start the service: sudo service wildfly start

It is necessary because we want to run the application on port 80. There are many possibilities to do it, but IMHO the cleanest (and simplest?) would be to proxy requests from Apache (port 80) to Wildfly (port 8080).

This howto is not exactly what we need, but it is a good point to start.

Enable:

• mod_proxy
• mod_rewrite
• mod_proxy_ajp

Example command:

sudo a2enmod proxy_ajp

In proxy.conf:

  ProxyPass / ajp://localhost:8009/\\ 
 
#  ProxyPass / http://localhost:8080/doit/\\ 
#  ProxyPassReverse / http://localhost:8080/doit/

In the keycloak admin console go to “Clients”, choose “avril-web” and on the “Settings” screen set Root URL to http://avril.wialon-consulting.de