HAProxy to TaskList (Camunda 8 Docker Compose Setup)

tsnyder · October 21, 2024, 6:12am

Hello,

I have setup my camunda using the default docker compose setup. And I got keycloak successfully hosted behind ngrok.

My goal is to run camunda with ngrok pointing at;

https://camunda-auth.dev.klustr.io/ (:18080)
https://camunda-tasks.dev.klustr.io/ (port :8082)

I needed to configure keycloak so that it could accept the X-Forwarded-For headers and got a successful login flow initiated after modifying the camunda docker-compose file.

Right now I’m stuck the TASKLIST /identity redirect is using the IP address as a redirect.

You can see the flow completes but /identity-callback running tries to redirect to the IP.

I assume I should SOMEHOW configure tasklist to tell it "Hey you are hosted at https://camunda-tasks.dev.klustr.io … but I can’t find it…

I looked up source code for tasklist identity controller and it looks like this;

github.com

camunda/camunda/blob/b2275df85dc9c486bdd8d2e544d9931cef51697e/tasklist/webapp/src/main/java/io/camunda/tasklist/webapp/security/identity/IdentityController.java#L108


      
              securityContextRepository.saveContext(context, req, res);
          
              redirectToPage(req, res);
            } catch (final Exception iae) {
              clearContextAndRedirectToNoPermission(req, res, iae);
            }
          }
          
          private void redirectToPage(final HttpServletRequest req, final HttpServletResponse res)
              throws IOException {
            final Object originalRequestUrl = req.getSession().getAttribute(REQUESTED_URL);
            if (originalRequestUrl != null) {
              res.sendRedirect(originalRequestUrl.toString());
            } else {
              res.sendRedirect(ROOT);
            }
          }
          
          /**
           * Is called when there was an in authentication or authorization
           *

How can I configure tasklist (and other related services) to know that they are on hostname. My ngrok proxy is passing all the headers (X-Forwarded-Proto, X-Forwarded-Host, X-Forwarded-Port)…

Any help appreciated!

cpbpm · October 21, 2024, 10:52am

When you setup with docker, did you update with hostname for KEYCLOAK and HOST key in the .env file? If not you can update the .env file to put the hostname.

tsnyder · November 9, 2024, 5:43am

I figured it all out and set this up and it all works now! Thanks.