Diferencias

Muestra las diferencias entre dos versiones de la página.

--- proyectos:linuxservidor-sso [2021/05/04 06:20] – creado manuel.floresv
+++ proyectos:linuxservidor-sso [2022/04/10 04:36] (actual) – [Referencias] manuel.floresv
@@ Línea 3: / Línea 3: @@
   * [[https://www.keycloak.org/ |keycloak ]]
   * [[https://syncope.apache.org| syncope]]
+  * [[https://github.com/authelia/authelia| authelia]]
+====== Keycloak ======
+<code bash>
+apt install unzip openjdk-11-jre
+wget https://github.com/keycloak/keycloak/releases/download/15.0.1/keycloak-15.0.1.zip
+./keycloak-15.0.1/bin/standalone.sh &
+apt install nginx-full
+rm /etc/nginx/sites-enabled/default
+nano /etc/nginx/sites-available/auth.dominio.com.conf
+</code>
+<code nginx>
+  server {
+    listen 80;
+    proxy_set_header X-Forwarded-For $proxy_protocol_addr; # To forward the original client's IP address
+    proxy_set_header X-Forwarded-Proto $scheme; # to forward the  original protocol (HTTP or HTTPS)
+    proxy_set_header Host $host; # to forward the original host requested by the client
+    location / {
+      root   /var/www/html;
+      try_files $uri $uri/ /index.html;      #to support in app routing in SPA
+    }
+    location /auth {
+      proxy_pass http://localhost:8080;
+    }
+  }
+</code>
+<code bash>
+ln -s /etc/nginx/sites-available/auth.dominio.com.conf /etc/nginx/sites-enabled/auth.dominio.com.conf
+systemctl  restart nginx
+</code>
+http://IP-REMOTA/auth
+Crear el usuario y comenzar a configurar
+====== Authelia ======
+Crear los registros de dns para:
+  - ''public.example.com''
+  - ''traefik.example.com''
+  - ''secure.example.com''
+Instalar authelia y probarlo de forma local
+<code bash>
+git clone https://github.com/authelia/authelia.git
+cd authelia/examples/compose/local
+git checkout $(git describe --tags `git rev-list --tags --max-count=1`)
+./setup.sh
+</code>
+====== Referencias ======
+  * https://www.keycloak.org/getting-started/getting-started-zip
+  * https://medium.com/@hasnat.saeed/setup-keycloak-server-on-ubuntu-18-04-ed8c7c79a2d9
+  * https://www.puppeteers.net/how-to-add-openid-to-wordpress-with-keycloak/