modified: serv_nginx/docker-compose.yml

change keycloak service config into docker-compose.yaml file

serv_nginx/docker-compose.yml

@@ -168,15 +168,13 @@ services:
       KEYCLOAK_ADMIN: admin
       KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD:-admin}
       KC_DB_PASSWORD: ${KEYCLOAK_DB_PASSWORD:-keycloak}
-      # Добавьте эти переменные
-      KC_HOSTNAME: yalarba.ru
-      KC_HOSTNAME_URL: https://yalarba.ru
-      KC_HOSTNAME_ADMIN_URL: https://yalarba.ru
+      # Используем только hostname-url с путем /auth
+      KC_HOSTNAME_URL: https://yalarba.ru/auth
       KC_PROXY: x_forwarded
       KC_HTTP_ENABLED: true
-      KC_HOSTNAME_STRICT: false
-      KC_HOSTNAME_STRICT_HTTPS: false
-      KC_HTTP_CORS: true
+      KC_HTTP_RELATIVE_PATH: /auth
+      KC_HOSTNAME_STRICT: true
+      KC_HOSTNAME_STRICT_HTTPS: true
     volumes:
       - keycloak_data:/opt/keycloak/data
     networks:
@@ -185,7 +183,6 @@ services:
     depends_on:
       keycloak-db:
         condition: service_healthy
-    # Команда теперь указана в Dockerfile 
 
   keycloak-db:
     image: postgres:15-alpine