fix(v0.2): align Keycloak auth to HTTPS session API key

deploy/deploy.json

@@ -126,10 +126,12 @@
       "sourceBranch": "v0.2",
       "gitopsBranch": "v0.2-gitops",
       "namespace": "hwlab-v02",
-      "endpoint": "http://74.48.78.17:19667",
+      "endpoint": "https://hwlab.74-48-78-17.nip.io",
       "publicEndpoints": {
-        "frontend": "http://74.48.78.17:19666",
-        "api": "http://74.48.78.17:19667"
+        "frontend": "https://hwlab.74-48-78-17.nip.io",
+        "api": "https://hwlab.74-48-78-17.nip.io",
+        "legacyFrontend": "http://74.48.78.17:19666",
+        "legacyApi": "http://74.48.78.17:19667"
       },
       "artifactCatalog": "deploy/artifact-catalog.v02.json",
       "runtimePath": "deploy/gitops/g14/runtime-v02",

deploy/k8s/keycloak/keycloak-bootstrap-job.yaml

@@ -58,9 +58,9 @@ spec:
             - name: CLIENT_ID
               value: hwlab-cloud-web
             - name: REDIRECT_URI_DEV
-              value: http://74.48.78.17:19667/auth/oidc/callback
+              value: https://hwlab.74-48-78-17.nip.io/auth/oidc/callback
             - name: WEB_ORIGIN_DEV
-              value: http://74.48.78.17:19666
+              value: https://hwlab.74-48-78-17.nip.io
             - name: ACCESS_TOKEN_LIFESPAN
               value: "1440"
             - name: SSO_SESSION_MAX_LIFESPAN
@@ -133,7 +133,7 @@ spec:
                   -s 'redirectUris=["'"$REDIRECT_URI_DEV"'"]' \
                   -s 'webOrigins=["'"$WEB_ORIGIN_DEV"'"]' \
                   -s standardFlowEnabled=true \
-                  -s directAccessGrantsEnabled=true
+                  -s directAccessGrantsEnabled=false
                 echo "client-updated"
               else
                 echo "creating-client"
@@ -145,7 +145,7 @@ spec:
                   -s 'redirectUris=["'"$REDIRECT_URI_DEV"'"]' \
                   -s 'webOrigins=["'"$WEB_ORIGIN_DEV"'"]' \
                   -s standardFlowEnabled=true \
-                  -s directAccessGrantsEnabled=true
+                  -s directAccessGrantsEnabled=false
                 echo "client-created"
               fi
               echo "keycloak-bootstrap-complete"

deploy/master/caddy/Caddyfile

@@ -37,3 +37,15 @@ auth.74-48-78-17.nip.io {
         }
     }
 }
+
+hwlab.74-48-78-17.nip.io {
+    encode zstd gzip
+    reverse_proxy 127.0.0.1:19666 {
+        header_up Host {host}
+        header_up X-Real-IP {remote_host}
+        transport http {
+            dial_timeout 5s
+            response_header_timeout 30s
+        }
+    }
+}