Keycloak & Cloudron

[BrutalBirdie]

Do we have some Keycloak experts here?
Got some question that need answers that my searches could not.

[BrutalBirdie]

just as a note.
I am using the Keycloak app now in production soooooooo if something breaks on updates I will know it first.

[Sam_uk]

Has anyone successfully applied a theme to their keycloak instance on Cloudron? I've tried the folder & jar approaches without success so far. They don't show up in the Keycloak webui

[BrutalBirdie]

@Sam_uk Yes we did and let me tell you. It's a pain.
I can try to get my sister on here, she did the theming for one of our keycloaks on Cloudron and cursed a lot while doing that

[Sam_uk]

That would be great, thanks. I've done the theme bit, it works on my non-Cloudron installs. The Cloudron instance just seems to ignore the files though.

[Sam_uk]

Do you think Keycloak will ever be added as an official app here? I'm considering just moving my instance to alternative hosting.

[BrutalBirdie]

@Sam_uk
Did you set the following in /app/data/conf/keycloak.conf?

spi-theme-static-max-age = -1
spi-theme-cache-themes = false
spi-theme-cache-templates = false

[girish]

@Sam_uk out of curiousity did elest.io not work out? I thought you already moved keycloak there per your earlier comment?

[Sam_uk]

I moved one to Elest.io and that ones working well. I can update the themes on that one. I'm considering moving a second instance across.

[Sam_uk]

I didn't have those settings @BrutalBirdie but have now added them and restarted and I'm still not seeing them in the keycloak webui

[adisonverlice2]

wait, so how do I use this with cloudron?

[Sam_uk]

Frankly at this point I wouldn't bother. If you want an alternate SSO system I'd set it up on Elest.io

[jdaviescoates]

@Sam_uk why?

Wouldn't it be nice/ good to have it on Cloudron too?

Or are you just tired of waiting for that to happen?

Or are there reasons you'd use Elest.io over Cloudron even if you were starting afresh and it was on Cloudron? If so, what are those reasons?

Thanks!

[Sam_uk]

@jdaviescoates Every time it updates it loses it's email config, so users can't get password resets etc.

I've kind of given up hoping it will be fixed. It just works on Elest.io, it's worth $10/m to me to have reliability.

I accept this is an unofficial package, and that's just how it goes. If I didn't mind being locked into Cloudron it looks like the on-board OIDC works nicely now, but that didn't exist when I set it up & I'd prefer data portability.

[jdaviescoates]

@Sam_uk said in Keycloak & Cloudron:

@jdaviescoates Every time it updates it loses it's email config, so users can't get password resets etc.

I've kind of given up hoping it will be fixed. It just works on Elest.io, it's worth $10/m to me to have reliability.

I accept this is an unofficial package, and that's just how it goes. If I didn't mind being locked into Cloudron it looks like the on-board OIDC works nicely now, but that didn't exist when I set it up & I'd prefer data portability.

Fair enough. Although I guess it it were an official app you likely wouldn't have those issues.

I also read a post on there somewhere (which I've just spent ages trying but failing to find again) where someone was asking about details of Cloudron's OIDC implementation and features, and when I read it I thought of discussion I'd had with you and how it might be appropriate to not have Cloudron as the ultimate source of truth about users.

I'd love to understand more about to what extent having users primarily on Cloudron locks you into using Cloudron