feat: define trusted reverse proxy header contract

2026-07-25 16:29:32 +09:00
parent 3473875d9a
commit 8539d1bf5b
4 changed files with 53 additions and 0 deletions
@@ -0,0 +1,6 @@
+# Keycloak receives HTTP only from the trusted reverse proxy.
+KC_HTTP_ENABLED=true
+KC_PROXY_HEADERS=xforwarded
+KC_HOSTNAME=https://auth.example.test
+KC_HOSTNAME_STRICT=true
+