Question

我已经待了好几个星期了，不知道发生了什么事。基本上，我有一个可以在端口8080上使用nginx（ssl）和/或keycloak而不使用ssl的应用程序。但是，由于某种原因，我无法使其与traefik一起使用。

我到处都是，我无法弄清楚为什么当我从我的应用程序重定向到密钥斗篷时出现500内部错误。我无法进入keycloaks登录页面。我得到空白页。密钥斗篷

中似乎有一个错误

错误[org.keycloak.services.error.KeycloakErrorHandler]（默认任务12）无法创建错误页面：java.lang.NullPointerException 在org.keycloak.theme.ExtendingThemeManager.loadTheme（ExtendingThemeManager.java:117）在org.keycloak.theme.ExtendingThemeManager.getTheme（ExtendingThemeManager.java:95）

https://keycloak.dev/auth/realms/master/protocol/openid-connect/auth?client_id=formward&state=7a50ff93-46ad-419b-8428-fc662b17aa0e&redirect_uri=http%3A%2F%2Ftravelvoucher.dev%2Fpdf%3Fauth_callback%3D1&scope=openid&response_type=code

返回500

 https://keycloak.dev/auth/realms/master/protocol/openid-connect/auth?client_id=formward&state=7a50ff93-46ad-419b-8428-fc662b17aa0e&redirect_uri=http%3A%2F%2Ftravelvoucher.dev%2Fpdf%3Fauth_callback%3D1&scope=openid&response_type=code

返回500

这是我的docker-compose.yaml

  keycloak:
    image: 'jboss/keycloak'
    container_name: keycloak
    #env_file: ./assets/keycloak.env
    #restart: unless-stopped
    depends_on:
     - keycloak_postgres
    volumes:
        #- keycloak_data:/var/lib/postgresql/keycloak
        #- ./assets/standalone.xml:/opt/jboss/keycloak/standalone/configuration/standalone.xml
      - ./cert.key:/etc/x509/https/cert.key
      - ./cert.crt:/etc/x509/https/cert.crt
    environment:
        - DB_VENDOR=POSTGRES
        - DB_ADDR=keycloak_postgres
        - DB_DATABASE=keycloak
        - DB_USER=keycloak
        - DB_SCHEMA=public
        - DB_PASSWORD=password
        - KEYCLOAK_USER=admin
        - KEYCLOAK_PASSWORD=password
        - PROXY_ADDRESS_FORWARDING=true
        - KEYCLOAK_LOGLEVEL=ERROR # DEBUG, ERROR, INFO
    ports:
      - "8443"
    expose: 
      - "8080"
    labels:
      - "traefik.port=8080"
      - "traefik.frontend.rule=Host:keycloak.10.34.60.5.xip.io,keycloak.dev,keycloak.docker.localhost"
      - "traefik.docker.network=web"
      - "traefik.frontend.passHostHeader=true"
      - "traefik.frontend.headers.X-Forwarded-For=10.34.60.5"
      - "traefik.frontend.headers.X-Forwarded-Proto=https"
      - "traefik.frontend.headers.X-Forwarded-Port=443"
    networks:
      - web
      - internal
      # This command is only required if using Traefik. It's not required if using nginx.
    command: ["-b", "0.0.0.0", "-Dkeycloak.profile.feature.docker=enabled"]

  keycloak_postgres:
    image: postgres
    #env_file: ./assets/keycloak.env
    #restart: unless-stopped
    volumes:
      - keycloak_data:/var/lib/postgresql/data
    environment:
      POSTGRES_DB: keycloak
      POSTGRES_USER: keycloak
      POSTGRES_PASSWORD: password
    networks:
      internal:
    expose:
     - "5432"
    labels:
     - "traefik.enable=false"

  reverse-proxy:
    image: traefik # The official Traefik docker image
    container_name: traefik
    command: --api --docker # Enables the web UI and tells Traefik to listen to docker
    ports:
      - "80:80"     # The HTTP port
      - "443:443"
      #- "8080:8080" # The Web UI (enabled by --api)
    expose:
      - "8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock # So that Traefik can listen to the Docker event
      - ./assets/traefik.toml:/etc/traefik/traefik.toml
      - ./cert.key:/cert.key
      - ./cert.crt:/cert.crt
    labels:
      - "traefik.backend=traefik"
      - "traefik.frontend.rule=Host:admin.10.34.60.5.xip.io,admin.dev"
      - "traefik.port=8080"
      - "traefik.docker.network=web"
    networks:
      - web

这是我的traefik.toml配置：

################################################################
# Global configuration
################################################################
InsecureSkipVerify = true
# Enable debug mode
#
# Optional
# Default: false
#
 debug = true

# Log level
#
# Optional
# Default: "ERROR"
#
 logLevel = "ERROR"

# Entrypoints to be used by frontends that do not specify any entrypoint.
# Each frontend can specify its own entrypoints.
#
# Optional
# Default: ["http"]
#
 defaultEntryPoints = ["http", "https"]

################################################################
# Entrypoints configuration
################################################################

# Entrypoints definition
#
# Optional
# Default:
[entryPoints]
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
    entryPoint = "https"
  [entryPoints.https]
  address = ":443"
    [entryPoints.https.tls]
      [[entryPoints.https.tls.certificates]]
      certFile = "/cert.crt"
      keyFile = "/cert.key"

################################################################
# Traefik logs configuration
################################################################

# Traefik logs
# Enabled by default and log to stdout
#
# Optional
#
# [traefikLog]

# Sets the filepath for the traefik log. If not specified, stdout will be used.
# Intermediate directories are created if necessary.
#
# Optional
# Default: os.Stdout
#
# filePath = "log/traefik.log"

# Format is either "json" or "common".
#
# Optional
# Default: "common"
#
# format = "common"

################################################################
# Access logs configuration
################################################################

# Enable access logs
# By default it will write to stdout and produce logs in the textual
# Common Log Format (CLF), extended with additional fields.
#
# Optional
#
# [accessLog]

# Sets the file path for the access log. If not specified, stdout will be used.
# Intermediate directories are created if necessary.
#
# Optional
# Default: os.Stdout
#
# filePath = "/path/to/log/log.txt"

# Format is either "json" or "common".
#
# Optional
# Default: "common"
#
# format = "common"

################################################################
# API and dashboard configuration
################################################################

# Enable API and dashboard
[api]

  # Name of the related entry point
  #
  # Optional
  # Default: "traefik"
  #
  # entryPoint = "traefik"

  # Enabled Dashboard
  #
  # Optional
  # Default: true
  #
  # dashboard = false

################################################################
# Ping configuration
################################################################

# Enable ping
[ping]

  # Name of the related entry point
  #
  # Optional
  # Default: "traefik"
  #
  # entryPoint = "traefik"

################################################################
# Docker configuration backend
################################################################

# Enable Docker configuration backend
[docker]
network = "web"
watch = true
# Docker server endpoint. Can be a tcp or a unix socket endpoint.
#
# Required
# Default: "unix:///var/run/docker.sock"
#
# endpoint = "tcp://10.10.10.10:2375"

# Default domain used.
# Can be overridden by setting the "traefik.domain" label on a container.
#
# Optional
# Default: ""
#
domain = "dev"

# Expose containers by default in traefik
#
# Optional
# Default: true
#
# exposedByDefault = true

Answer 1

您正在使用特定配置（master = client_id）访问Keycloak的formward领域，但尚不清楚如何构建此配置，docker-compose.yml中未提及。可能的领域配置/构建步骤之一是扩展或更改默认主题。错误消息指出，无论配置了什么主题，Keycloak都找不到。您可能已经在正在运行的Keycloak实例上手动执行了配置，并且/或者从某个地方使用此配置导入了一个领域，这两种配置状态都不会持久（并非Keycloak所做/使用的所有事情都存储在数据库中）

建议：退后一步，在不使用Traefik的情况下编写Keycloak，确保其健康，将配置步骤添加到docker-compose中，然后添加Traefik。

使用Keycloak设置Traefik返回500

1 个答案: