meldestelle/config
Stefan Mogeritsch d6a484c347
All checks were successful
Build and Publish Docker Images / build-and-push (., backend/infrastructure/gateway/Dockerfile, api-gateway, api-gateway) (push) Successful in 6m48s
Build and Publish Docker Images / build-and-push (., backend/services/ping/Dockerfile, ping-service, ping-service) (push) Successful in 6m40s
Build and Publish Docker Images / build-and-push (., config/docker/caddy/web-app/Dockerfile, web-app, web-app) (push) Successful in 1m44s
Build and Publish Docker Images / build-and-push (., config/docker/keycloak/Dockerfile, keycloak, keycloak) (push) Successful in 1m31s
fix: update Keycloak configuration and Docker healthcheck improvements
- Enabled `directAccessGrants` for `frontend-client` in `meldestelle-realm.json` to support ROPC login flow.
- Strengthened admin credentials in realm configuration to meet password policy requirements.
- Upgraded Keycloak to `26.5.5` with updated Docker healthcheck logic:
  - Replaced `curl` with bash `/dev/tcp` for compatibility with `ubi9-micro` image.
  - Switched health endpoint from `/ready` to `/live` for single-node use.
  - Adjusted healthcheck timings (`start_period`, `timeout`, `interval`) for smoother startup.
- Removed deprecated v1 hostname parameter `KC_HOSTNAME_STRICT_HTTPS`.

Signed-off-by: Stefan Mogeritsch <stefan.mo.co@gmail.com>
2026-03-09 15:51:42 +01:00
..
app docs: finalize and verify Redis-to-Valkey migration and Keycloak hardening 2026-03-09 15:51:42 +01:00
bundles chore(MP-28): add arch guards, bundle budgets & detekt consolidation 2025-12-08 12:19:41 +01:00
docker fix: update Keycloak configuration and Docker healthcheck improvements 2026-03-09 15:51:42 +01:00
quality chore(ci, quality): introduce PR Guard workflow to detect hardcoded dependency versions 2026-01-31 18:45:24 +01:00
scripts infra: clean up Keycloak configuration, enforce consistency in .env, and improve health checks 2026-03-06 11:23:24 +01:00