Ensure operation behind reverse proxy

templates/docker-compose.yml

@@ -25,6 +25,8 @@ services:
       DB_PASSWORD: password
       KEYCLOAK_USER: '{{ item.admin.username }}'
       KEYCLOAK_PASSWORD: '{{ item.admin.password }}'
+      PROXY_ADDRESS_FORWARDING: 'true'
+      KEYCLOAK_ALWAYS_HTTPS: 'true'
     restart: always
     ports:
       - '{{ item.port }}:8080'

templates/vhost.conf

@@ -19,12 +19,11 @@
   SSLCompression off
   SSLHonorCipherOrder on
 
+  ProxyPreserveHost On
   SetEnvIf Host "^(.*)$" THE_HOST=$1
   RequestHeader setifempty X-Forwarded-Proto https
   RequestHeader setifempty X-Forwarded-Host %{THE_HOST}e
   ProxyAddHeaders Off
-
-  ProxyPassMatch (.*)(\/websocket)$ "ws://127.0.0.1:{{ item.port }}/$1$2"
   ProxyPass / "http://127.0.0.1:{{ item.port }}/"
   ProxyPassReverse / "http://127.0.0.1:{{ item.port }}/"
 </VirtualHost>