<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body>
<p>Hello there,</p>
<p><br>
</p>
<p>yes we configured midpoint to run behind traefik (loadbalancer
for docker). This feature was actually recently implemented into
midpoint 4.1 (-SNAPSHOT) per our request.</p>
<p><br>
</p>
<p>You need to set the following in System Configuration.</p>
<p><i><font size="-1"><infrastructure></font></i></p>
<p><i><font size="-1"><span class="blob-code-inner blob-code-marker"
data-code-marker="+"> <publicHttpUrlPattern></span><span
class="blob-code-inner blob-code-marker"
data-code-marker="+"><span class="blob-code-inner
blob-code-marker" data-code-marker="+"><a class="moz-txt-link-freetext" href="https://$host/midpoint">https://$host/midpoint</a></span></publicHttpUrlPattern></span><br>
</font></i></p>
<p><i><font size="-1"></infrastructure></font></i></p>
<p><br>
</p>
<p>Changing any settings for embedded tomcat is not required. (And
did also not work for us to achieve SSL offloading)</p>
<p><br>
</p>
<p>This solution will work for midpoint 4.1 and above.</p>
<p><br>
</p>
<p>In addition to that and prior to 4.1 we force a redirection from
HTTP -> HTTPS on the loadbalancer. This causes some additional
redirects and causes security issues when authentication headers
and passwords are involved but alteast it is a works.
(<a class="moz-txt-link-freetext" href="https://docs.traefik.io/v1.4/user-guide/examples/#http-redirect-on-https">https://docs.traefik.io/v1.4/user-guide/examples/#http-redirect-on-https</a>)
<br>
</p>
<p><br>
</p>
<p>Best regards</p>
<p>Martin</p>
<p><br>
</p>
<p> <br>
</p>
<div class="moz-cite-prefix">Am 04.03.2020 um 16:24 schrieb Keith
Hazelton:<br>
</div>
<blockquote type="cite"
cite="mid:DM5PR08MB2986D4CC59FEE69B8DC4E11386E50@DM5PR08MB2986.namprd08.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0);">
On behalf of Ned Morgan:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif;
font-size: 12pt; color: rgb(0, 0, 0);">
<span style="color: rgb(29, 28, 29); font-family: Slack-Lato,
appleLogo, sans-serif; font-size: 15px;
font-variant-ligatures: common-ligatures; orphans: 2;
text-align: left; widows: 2; background-color: rgb(248, 248,
248); display: inline !important">Has anyone tackled
configuring midPoint to work behind a load balancer with SSL
offloading configured? I am attempting to do so and keep
running into an issue where midPoint keeps redirecting the
client to URLs over HTTP. I have tried various combinations of
settings for the embedded tomcat to accept forwarded headers,
but haven't had much luck.</span><br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
</body>
</html>