User Tools

Site Tools


rebranding_for_arealcontrol

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
rebranding_for_arealcontrol [2016/10/19 16:10] – [Core] kalaschnikowrebranding_for_arealcontrol [2018/04/23 15:57] (current) – external edit 127.0.0.1
Line 1: Line 1:
 +====== Rebranding for ArealControl ======
  
 +===== Backup =====
 +  * backup -> /mnt/sda3/backup/keycloak_simon.bak
 +  * keycloak_simon after deleting of logs weights only ~150 MB
 +
 +
 +===== Core =====
 +  * Change keycloak/standalone/configuration/themes/login/base/template.ftl 
 +    * comment out logo
 +    * comment out "login to xyz-realm"
 +  * In the admin console
 +    * In the realm "avril-realm"
 +      * in the application "avril-web"
 +        * in the settings 
 +          * change Redirect URI to "/doit/*"
 +          * change Base URL to "/doit/index.html"
 +  * ...
 +  * create path "/opt/avril/upload" for attachments and make it writable for the keycloak user (in our case "wildfly")
 +    * it is fix because of source, but it if we change it in source it is also possible to make it flexible (through configuration in standalone.xml) 
 +
 +
 +===== Run keycloak as service =====
 +  * copy wildfly file to /etc/init.d
 +  * add user: ''sudo useradd wildfly''
 +  * change owner of all files in keycloak directory: ''sudo chown -R wildfly keycloak''
 +  * change owner of attachments directory: ''sudo chown -R wildfly /opt/avril/upload''
 +  * Start the service: ''sudo service wildfly start''
 +
 +===== Use Apache as proxy for Wildfly =====
 +
 +It is necessary because we want to run the application on port 80. There are many possibilities to do it, but IMHO the cleanest (and simplest?) would be to proxy requests from Apache (port 80) to Wildfly (port 8080). 
 +
 +[[http://planet.jboss.org/post/use_apache_2_4_x_as_a_secure_reverse_proxy_for_jboss_wildfly|This howto]] is not exactly what we need, but it is a good point to start. 
 +
 +
 +Enable:
 +  * mod_proxy
 +  * mod_rewrite
 +  * mod_proxy_ajp
 +
 +Example command:
 +<code bash>
 +sudo a2enmod proxy_ajp
 +</code>
 +
 +
 +In proxy.conf:
 +
 +<code bash>
 +  ProxyPass / ajp://localhost:8009/\\ 
 +  
 +#  ProxyPass / http://localhost:8080/doit/\\ 
 +#  ProxyPassReverse / http://localhost:8080/doit/
 +</code>
 +
 +In the keycloak admin console go to "Clients", choose "avril-web" and on the "Settings" screen set **Root URL** to ''http://avril.wialon-consulting.de''