Definitive instructions for https setup

[Kevin Doyle]

Hi

I have seen a few people asking for help in setting up cbioportal + Keycloak + reverse-proxy (https)  using docker images. But the reverse-proxy solutions are mostly incomplete / missing detail. I have setup a working cbioportal + Keycloak and it is working well using docker images and connecting to AD. I would like to add on either apache or nginx docker to use https . 

I can imagine a lot of people would want this full setup. Either can anybody post on here full instructions for the reverse-proxy config or add them to the cbioportal setup instructions 

I have read the emails from Jamie O'Conner, Thomas Pauli, and Bronti but still having trouble with a simple reverse-proxy setup because the solution seems to be different in each case. I have tried to copy the solution but either prior knowledge is required to setup apache / nginx or files are missing in the solution

Many thanks for your help

Kevin Doyle

Cancer Research UK

[Benjamin Gross]

HI Kevin,

Sorry for the delayed response and the problems you are having setting up the reverse proxy.   I’m not sure if you require help setting up apache or nginx which is outside our wheelhouse, but we can help downstream from there.  Since you’ve already read other google group emails I imagine that you’ve made the necessary adjustments to the webapp-runner.jar command line and added the —proxy-base-url argument.

One thing that you may need to do since you are running a secure channel is update your “Valid Redirect URIs” field in Keycloak (step 4 in the page linked below) and take into consideration the ssl port:

https://domain-name.org:443/*

https://docs.cbioportal.org/2.2-authorization-and-authentication/authenticating-and-authorizing-users-via-keycloak#configure-keycloak-to-authenticate-your-cbioportal-instance

I hope this helps.  If there is more information you can provide, error messages, screenshots, that might be helpful.

Regards,

Benjamin

--
You received this message because you are subscribed to the Google Groups "cBioPortal for Cancer Genomics Discussion Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cbioportal+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/cbioportal/e451a9f2-0dbd-4b08-a591-d17537b72a91n%40googlegroups.com.