Can we run local keycloak at port 80

[Kenn Baker]

I'd like to start a local keycloak server at http://localhost (i.e., http://localhost:80)

I'm running a clean 14.0.0 distribution.

`./bin/standalone.sh` starts the local keycloak at http://localhost:8080

`./bin/standalone.sh -Djboss.socket.binding.port-offset=1010` starts the local keycloak at http://localhost:9090

Both `./bin/standalone.sh -Djboss.http.port=80` and `./bin/domain.sh -Djboss.http.port=80` (from https://www.keycloak.org/docs/14.0/server_installation/#domain-configuration) don't start the server at all.

Does anyone know if this can be done, and if so, how to do it?

[Jannik]

Hello Kenn,

WildFly uses Socket Binding groups to configure the network ports, which will be open and listening for incoming connections. In Standalone mode, there is a single Socket Binding Group which is used to define port settings. The Value of http.port represents the Port used for http requests.

However if setting the value as Parameter doesn't work, you may have more luck with trying one of the three steps below:

1. Change it in the configuration File

Stop the Server.

Do a Backup of the configuration File.

Edit the Value

 <socket-binding name="http" port="${jboss.http.port:8080}"/>

in .../keycloak/standalone/configuration/standalone.xml

Restart the Server.

2. Via WildFly Admin GUI (HAL Management Console)

Login as WildFly User (Account needs to be created via separate command on CLI)

Go to http://localhost:9990/console/index.html#socket-binding;name=standard-sockets

Click on Inbound -> select http > edit

Change the Value and save.

3. Use a loadbalancer

In bigger setups you can also use a loadbalancer listening on Port 80 to forward requests to Port 8080 of your Keycloak Server Instances.

Regards

networksecurityvodoo

Am 01.10.21 um 04:44 schrieb Kenn Baker:

--
You received this message because you are subscribed to the Google Groups "Keycloak User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/fd48cc99-d3c1-4867-9861-1a4b6ca57d0fn%40googlegroups.com.