Add variable for frontendUrl (for revproxy scenario)

roles/keycloak/README.md

@@ -47,6 +47,7 @@ The following variables are _required_ only when `keycloak_ha_enabled` is True:
 | Variable | Description | Default |
 |:---------|:------------|:---------|
 |`keycloak_modcluster_url` | URL for the modcluster reverse proxy | `localhost` |
+|`keycloak_frontend_url` | frontend URL for keycloak endpoints when a reverse proxy is used | `localhost` |
 |`keycloak_jdbc_engine` | backend database flavour when db is enabled: [ postgres, mariadb ] | `postgres` |
 |`infinispan_url` | URL for the infinispan remote-cache server | `localhost:11122` |
 |`infinispan_user` | username for connecting to infinispan | `supervisor` |

roles/keycloak/defaults/main.yml

@@ -50,6 +50,7 @@ keycloak_force_install: False
 
 ### mod_cluster reverse proxy
 keycloak_modcluster_url: localhost
+keycloak_frontend_url: localhost
 
 ### infinispan remote caches access (hotrod)
 infinispan_user: supervisor

roles/keycloak/tasks/systemd.yml

@@ -38,6 +38,9 @@
     daemon_reload: yes
   when: systemdunit.changed
 
+- set_fact:
+    health_url: "{{ keycloak_management_url }}/health"
+
 - name: start keycloak
   systemd:
     name: keycloak
@@ -56,9 +59,6 @@
 
 - meta: flush_handlers
 
-- set_fact:
-    health_url: "{{ keycloak_management_url }}/health"
-
 - name: "Wait until Keycloak becomes active {{ health_url }}"
   uri:
     url: "{{ health_url }}"

roles/keycloak/templates/standalone-infinispan.xml.j2

@@ -609,8 +609,8 @@
                 <default-provider>default</default-provider>
                 <provider name="default" enabled="true">
                     <properties>
-                        <property name="frontendUrl" value="${keycloak.frontendUrl:}"/>
-                        <property name="forceBackendUrlToFrontendUrl" value="false"/>
+                        <property name="frontendUrl" value="{{ keycloak_modcluster.frontend_url }}"/>
+                        <property name="forceBackendUrlToFrontendUrl" value="true"/>
                     </properties>
                 </provider>
             </spi>

roles/keycloak/templates/standalone-rhsso-jdg.xml.j2

@@ -606,8 +606,8 @@
                 <default-provider>default</default-provider>
                 <provider name="default" enabled="true">
                     <properties>
-                        <property name="frontendUrl" value="${keycloak.frontendUrl:}"/>
-                        <property name="forceBackendUrlToFrontendUrl" value="false"/>
+                        <property name="frontendUrl" value="{{ keycloak_modcluster.frontend_url }}"/>
+                        <property name="forceBackendUrlToFrontendUrl" value="true"/>
                     </properties>
                 </provider>
             </spi>

roles/keycloak/templates/standalone-rhsso.xml.j2

@@ -505,8 +505,8 @@
                 <default-provider>default</default-provider>
                 <provider name="default" enabled="true">
                     <properties>
-                        <property name="frontendUrl" value="${keycloak.frontendUrl:}"/>
-                        <property name="forceBackendUrlToFrontendUrl" value="false"/>
+                        <property name="frontendUrl" value="{{ keycloak_modcluster.frontend_url }}"/>
+                        <property name="forceBackendUrlToFrontendUrl" value="true"/>
                     </properties>
                 </provider>
             </spi>

roles/keycloak/templates/standalone.xml.j2

@@ -583,8 +583,8 @@
                 <default-provider>default</default-provider>
                 <provider name="default" enabled="true">
                     <properties>
-                        <property name="frontendUrl" value="${keycloak.frontendUrl:}"/>
-                        <property name="forceBackendUrlToFrontendUrl" value="false"/>
+                        <property name="frontendUrl" value="{{ keycloak_modcluster.frontend_url }}"/>
+                        <property name="forceBackendUrlToFrontendUrl" value="true"/>
                     </properties>
                 </provider>
             </spi>

roles/keycloak/vars/main.yml

@@ -55,6 +55,7 @@ keycloak_jdbc:
 keycloak_modcluster:
   enabled: "{{ keycloak_ha_enabled }}"
   reverse_proxy_url: "{{ keycloak_modcluster_url }}"
+  frontend_url: "{{ keycloak_frontend_url }}"
 
 # infinispan
 keycloak_remotecache: