[Louketo replacement ] #keycloak #proxy #oauth2-proxy

oauth2-proxy.yaml

  relypartyadmin:
    image: quay.io/oauth2-proxy/oauth2-proxy:latest
    hostname: relypartyadmin
    depends_on:
      - appserver
    restart: on-failure
    ports:
      - "8200:8200"
    environment:
      - OAUTH2_PROXY_STANDARD_LOGGING=true
      - OAUTH2_PROXY_AUTH_LOGGING=true
      - OAUTH2_PROXY_REQUEST_LOGGING=true
      - OAUTH2_PROXY_SILENCE_PING_LOGGING=true
      - OAUTH2_PROXY_CLIENT_ID=xxx
      - OAUTH2_PROXY_CLIENT_SECRET=public
      - OAUTH2_PROXY_OIDC_ISSUER_URL=https://xxx/auth/realms/internal
      - OAUTH2_PROXY_PROVIDER=oidc
      - OAUTH2_PROXY_PROVIDER_DISPLAY_NAME=Keycloak
      - OAUTH2_PROXY_COOKIE_SECRET=wgDwBfO0HAUXA3zf7VWTug==
      - OAUTH2_PROXY_UPSTREAMS=http://appserver:8080
      - OAUTH2_PROXY_HTTP_ADDRESS=0.0.0.0:8200
      - OAUTH2_PROXY_INSECURE_OIDC_ALLOW_UNVERIFIED_EMAIL=true
      - OAUTH2_PROXY_SSL_UPSTREAM_INSECURE_SKIP_VERIFY=true
      - OAUTH2_PROXY_SSL_INSECURE_SKIP_VERIFY=true
      - OAUTH2_PROXY_SET_XAUTHREQUEST=true
      - OAUTH2_PROXY_EMAIL_DOMAINS=* 
      - OAUTH2_PROXY_COOKIE_SECURE=false
      - OAUTH2_PROXY_ERRORS_TO_INFO_LOG=true
      - OAUTH2_PROXY_SKIP_JWT_BEARER_TOKENS=true
      - TZ=CET