- sudo sysctl net.ipv4.ip_unprivileged_port_start=80
- check if port 80 is binded to httpd.
- sudo firewall-cmd --zone=public --add-port=80/tcp
- sudo firewall-cmd --zone=public --add-port=443/tcp
- Add keycloak hostname to /etc/hosts or DNS to point the hostname to the VM ip address. Do ip addr to find out the vm ip.
- Get the CA public and private key
- Generate the CSR
- Generate the keycloak crt and key.
Remember to add the following to the nginx.conf for https case. If not /admin will not be reached.
location /auth {
....
}