151 lines
6.5 KiB
Text
151 lines
6.5 KiB
Text
|
|
echo *** Update jgroups subsystem ***
|
|
/subsystem=jgroups/stack=udp/transport=UDP:write-attribute(name=site, value=${jboss.site.name})
|
|
|
|
echo *** Update infinispan subsystem ***
|
|
/subsystem=infinispan/cache-container=keycloak:write-attribute(name=module, value=org.keycloak.keycloak-model-infinispan)
|
|
|
|
echo ** Add remote socket binding to infinispan server **
|
|
/socket-binding-group=standard-sockets/remote-destination-outbound-socket-binding=remote-cache:add(host=${remote.cache.host:localhost}, port=${remote.cache.port:11222})
|
|
|
|
echo ** Update replicated-cache work element **
|
|
/subsystem=infinispan/cache-container=keycloak/replicated-cache=work/store=remote:add( \
|
|
passivation=false, \
|
|
fetch-state=false, \
|
|
purge=false, \
|
|
preload=false, \
|
|
shared=true, \
|
|
remote-servers=["remote-cache"], \
|
|
cache=work, \
|
|
properties={ \
|
|
rawValues=true, \
|
|
marshaller=org.keycloak.cluster.infinispan.KeycloakHotRodMarshallerFactory, \
|
|
protocolVersion=${keycloak.connectionsInfinispan.hotrodProtocolVersion} \
|
|
} \
|
|
)
|
|
|
|
/subsystem=infinispan/cache-container=keycloak/replicated-cache=work:write-attribute(name=statistics-enabled,value=true)
|
|
|
|
echo ** Update distributed-cache sessions element **
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=sessions/store=remote:add( \
|
|
passivation=false, \
|
|
fetch-state=false, \
|
|
purge=false, \
|
|
preload=false, \
|
|
shared=true, \
|
|
remote-servers=["remote-cache"], \
|
|
cache=sessions, \
|
|
properties={ \
|
|
rawValues=true, \
|
|
marshaller=org.keycloak.cluster.infinispan.KeycloakHotRodMarshallerFactory, \
|
|
protocolVersion=${keycloak.connectionsInfinispan.hotrodProtocolVersion} \
|
|
} \
|
|
)
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=sessions:write-attribute(name=statistics-enabled,value=true)
|
|
|
|
echo ** Update distributed-cache offlineSessions element **
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=offlineSessions/store=remote:add( \
|
|
passivation=false, \
|
|
fetch-state=false, \
|
|
purge=false, \
|
|
preload=false, \
|
|
shared=true, \
|
|
remote-servers=["remote-cache"], \
|
|
cache=offlineSessions, \
|
|
properties={ \
|
|
rawValues=true, \
|
|
marshaller=org.keycloak.cluster.infinispan.KeycloakHotRodMarshallerFactory, \
|
|
protocolVersion=${keycloak.connectionsInfinispan.hotrodProtocolVersion} \
|
|
} \
|
|
)
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=offlineSessions:write-attribute(name=statistics-enabled,value=true)
|
|
|
|
echo ** Update distributed-cache clientSessions element **
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=clientSessions/store=remote:add( \
|
|
passivation=false, \
|
|
fetch-state=false, \
|
|
purge=false, \
|
|
preload=false, \
|
|
shared=true, \
|
|
remote-servers=["remote-cache"], \
|
|
cache=clientSessions, \
|
|
properties={ \
|
|
rawValues=true, \
|
|
marshaller=org.keycloak.cluster.infinispan.KeycloakHotRodMarshallerFactory, \
|
|
protocolVersion=${keycloak.connectionsInfinispan.hotrodProtocolVersion} \
|
|
} \
|
|
)
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=clientSessions:write-attribute(name=statistics-enabled,value=true)
|
|
|
|
echo ** Update distributed-cache offlineClientSessions element **
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=offlineClientSessions/store=remote:add( \
|
|
passivation=false, \
|
|
fetch-state=false, \
|
|
purge=false, \
|
|
preload=false, \
|
|
shared=true, \
|
|
remote-servers=["remote-cache"], \
|
|
cache=offlineClientSessions, \
|
|
properties={ \
|
|
rawValues=true, \
|
|
marshaller=org.keycloak.cluster.infinispan.KeycloakHotRodMarshallerFactory, \
|
|
protocolVersion=${keycloak.connectionsInfinispan.hotrodProtocolVersion} \
|
|
} \
|
|
)
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=offlineClientSessions:write-attribute(name=statistics-enabled,value=true)
|
|
|
|
echo ** Update distributed-cache loginFailures element **
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=loginFailures/store=remote:add( \
|
|
passivation=false, \
|
|
fetch-state=false, \
|
|
purge=false, \
|
|
preload=false, \
|
|
shared=true, \
|
|
remote-servers=["remote-cache"], \
|
|
cache=loginFailures, \
|
|
properties={ \
|
|
rawValues=true, \
|
|
marshaller=org.keycloak.cluster.infinispan.KeycloakHotRodMarshallerFactory, \
|
|
protocolVersion=${keycloak.connectionsInfinispan.hotrodProtocolVersion} \
|
|
} \
|
|
)
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=loginFailures:write-attribute(name=statistics-enabled,value=true)
|
|
|
|
echo ** Update distributed-cache actionTokens element **
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=actionTokens/store=remote:add( \
|
|
passivation=false, \
|
|
fetch-state=false, \
|
|
purge=false, \
|
|
preload=false, \
|
|
shared=true, \
|
|
cache=actionTokens, \
|
|
remote-servers=["remote-cache"], \
|
|
properties={ \
|
|
rawValues=true, \
|
|
marshaller=org.keycloak.cluster.infinispan.KeycloakHotRodMarshallerFactory, \
|
|
protocolVersion=${keycloak.connectionsInfinispan.hotrodProtocolVersion} \
|
|
} \
|
|
)
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=actionTokens:write-attribute(name=statistics-enabled,value=true)
|
|
|
|
echo ** Update distributed-cache authenticationSessions element **
|
|
/subsystem=infinispan/cache-container=keycloak/distributed-cache=authenticationSessions:write-attribute(name=statistics-enabled,value=true)
|
|
|
|
echo *** Enable debug logging ***
|
|
/subsystem=logging/logger=org.keycloak.cluster.infinispan:add(level=DEBUG)
|
|
|
|
/subsystem=logging/logger=org.keycloak.connections.infinispan:add(level=DEBUG)
|
|
|
|
/subsystem=logging/logger=org.keycloak.models.cache.infinispan:add(level=DEBUG)
|
|
|
|
/subsystem=logging/logger=org.keycloak.models.sessions.infinispan:add(level=DEBUG)
|
|
|
|
echo *** Update undertow subsystem ***
|
|
/subsystem=undertow/server=default-server/http-listener=default:write-attribute(name=proxy-address-forwarding,value=true)
|
|
|
|
echo *** Update keycloak-server subsystem, infinispan remoteStoreSecurity ***
|
|
/subsystem=keycloak-server/spi=connectionsInfinispan/provider=default:map-put(name=properties,key=remoteStoreSecurityEnabled,value=${keycloak.connectionsInfinispan.default.remoteStoreSecurityEnabled:true})
|
|
|
|
echo *** Enable offline user session preloading ***
|
|
/subsystem=keycloak-server/spi=userSessions:add(default-provider=infinispan)
|
|
/subsystem=keycloak-server/spi=userSessions/provider=infinispan:add(properties={preloadOfflineSessionsFromDatabase => @PRELOADING_ENABLED@},enabled=true)
|