kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-08-26 21:45:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

Set default buffer level for proxy basic conf, which are necessary for OIDC login

Browse Source
This commit is contained in:
Kevin Veen-Birkenbach 2025-08-20 15:56:32 +02:00
parent fa46523433
commit ad7e61e8b1
No known key found for this signature in database
GPG Key ID: 44D8F11FD62F878E
5 changed files with 17 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
roles/srv-proxy-core/templates/headers/buffers.conf.j2 Normal file
View File

@ -0,0 +1,6 @@
# Raise the maximal header size to allow huge headers Keycloak for authentification
proxy_buffer_size 16k;
proxy_buffers 8 16k;
proxy_busy_buffers_size 16k;
client_header_buffer_size 8k;
large_client_header_buffers 8 32k;

1
roles/srv-proxy-core/templates/location/html.conf.j2
View File

@ -1,5 +1,4 @@
{% set location = location | default("/")%} {% set location = location | default("/")%}
location {{location}} location {{location}}
{ {
{% if oauth2_proxy_enabled | default(false) | bool %} {% if oauth2_proxy_enabled | default(false) | bool %}

1
roles/srv-proxy-core/templates/vhost/basic.conf.j2
View File

@ -1,6 +1,7 @@
server server
{ {
server_name {{ domain }}; server_name {{ domain }};
{% include 'roles/srv-proxy-core/templates/headers/buffers.conf.j2' %}
{% if applications | get_app_conf(application_id, 'features.oauth2', False) %} {% if applications | get_app_conf(application_id, 'features.oauth2', False) %}
{% include 'roles/web-app-oauth2-proxy/templates/endpoint.conf.j2'%} {% include 'roles/web-app-oauth2-proxy/templates/endpoint.conf.j2'%}

8
roles/web-app-oauth2-proxy/templates/endpoint.conf.j2
View File

@ -1,11 +1,3 @@
{# Include OAuth2 Proxy #}
{# Raise the maximal header size. #}
{# Keycloak uses huge headers for authentification #}
proxy_buffer_size 16k;
proxy_buffers 8 16k;
proxy_busy_buffers_size 16k;
large_client_header_buffers 4 16k;
# OAuth2-Proxy-Endpoint # OAuth2-Proxy-Endpoint
location /oauth2/ { location /oauth2/ {
proxy_pass http://127.0.0.1:{{ ports.localhost.oauth2_proxy[application_id] }}; proxy_pass http://127.0.0.1:{{ ports.localhost.oauth2_proxy[application_id] }};