http:
  routers:
    oauth:
      entryPoints:
        - web
      rule: PathPrefix(`/oauth2/`)
      service: oauth2-proxy
      priority: 100
    application:
      entryPoints:
        - web
      rule: PathPrefix(`/`)
      middlewares:
        - keycloak-forward-auth
      service: application

  middlewares:
    keycloak-forward-auth:
      forwardAuth:
        address: http://oauth2-proxy:4180/oauth2/auth
        trustForwardHeader: false
        authResponseHeaders:
          - X-Auth-Request-User
          - X-Auth-Request-Email
          - Set-Cookie

  services:
    oauth2-proxy:
      loadBalancer:
        servers:
          - url: http://oauth2-proxy:4180
    application:
      loadBalancer:
        servers:
          - url: http://app:8081