Update Create Keyloak Server authored by Yi Sun's avatar Yi Sun
...@@ -13,7 +13,9 @@ You will need a server ready with proper DNS name for the public facing portal, ...@@ -13,7 +13,9 @@ You will need a server ready with proper DNS name for the public facing portal,
apt-get update -y & apt-get install -y nginx apt-get update -y & apt-get install -y nginx
``` ```
3\. Obtain SSL certificates from IT or Letsencrypt 3\. get a DNS name from https://docs.egi.eu/users/compute/cloud-compute/dynamic-dns/
3\. Obtain SSL certificates from Letsencrypt or https://certbot.eff.org
4\. create a directory for SSL certificates 4\. create a directory for SSL certificates
...@@ -26,7 +28,8 @@ mkdir /etc/nginx/certificates ...@@ -26,7 +28,8 @@ mkdir /etc/nginx/certificates
6\. apt-get install apt-transport-https ca-certificates curl software-properties-common 6\. apt-get install apt-transport-https ca-certificates curl software-properties-common
7\. pull keycloak container. Note that the currently keycloak version used is 4.5.0Final which is pretty old and due to upgrade. A more recent version would be better, but this will be a future work 7\. pull keycloak container. Note that the currently keycloak version used is 4.5.0Final which is pretty old and due to upgrade. A more recent version would be better, but this will be a future work
docker pull jboss/keycloak docker pull registry.git.embl.de/grp-cbbcs/band-artifacts/band-keycloak:2911
8\. configure nginx. remove default from /etc/nginx/site-enabled, add a file 'ssl' with the below content to /etc/nginx/site-available and enable it. 8\. configure nginx. remove default from /etc/nginx/site-enabled, add a file 'ssl' with the below content to /etc/nginx/site-available and enable it.
... ...
......