eho/register-referentie
1
0
Fork 0
Code Issues 15 Pull Requests 1 Actions 1 Packages Projects Releases 1 Wiki Activity

S-B01 · docker-compose.local.yml missing domain + portals; host-browser OIDC unwired #91

New Issue
Closed
opened 2026-07-16 12:03:53 +00:00 by not · 0 comments
not commented 2026-07-16 12:03:53 +00:00
Contributor
Copy Link

What: infra/docker-compose.local.yml is missing the domain service and all three portals (self-service, openbaar, behandel) that the CI-canonical infra/docker-compose.yml has. So a docker compose -f infra/docker-compose.local.yml up (the no-make local path) can't run the app end-to-end, and there's no local portal to browse.

Symptom: with the behandel portal added, a host browser is redirected to http://keycloak:8080/... (the baked compose authority), which the host can't resolve — "can't find keycloak". The local stack never wired host-browser OIDC: the local bff has no Keycloak env and the local Keycloak has no fixed issuer.

Fix: bring the local compose to parity with the canonical one — add domain + the three portals, and make host-browser OIDC work: pin Keycloak's frontend/issuer URL to http://localhost:8180 with a dynamic backchannel (so the BFF still validates via keycloak:8080 in-network), and point the portals' config.json at http://localhost:8180.

**What**: `infra/docker-compose.local.yml` is missing the `domain` service and all three portals (`self-service`, `openbaar`, `behandel`) that the CI-canonical `infra/docker-compose.yml` has. So a `docker compose -f infra/docker-compose.local.yml up` (the no-make local path) can't run the app end-to-end, and there's no local portal to browse. **Symptom**: with the behandel portal added, a host browser is redirected to `http://keycloak:8080/...` (the baked compose authority), which the host can't resolve — "can't find keycloak". The local stack never wired host-browser OIDC: the local `bff` has no Keycloak env and the local Keycloak has no fixed issuer. **Fix**: bring the local compose to parity with the canonical one — add `domain` + the three portals, and make host-browser OIDC work: pin Keycloak's frontend/issuer URL to `http://localhost:8180` with a dynamic backchannel (so the BFF still validates via `keycloak:8080` in-network), and point the portals' `config.json` at `http://localhost:8180`.
not added the type:bugarea:infra labels 2026-07-16 12:03:53 +00:00
not closed this issue 2026-07-16 12:45:09 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area:acl
area:bff
area:docs
area:domain
area:event-subscriber
area:infra
area:portal-behandel
area:portal-beheer
area:portal-openbaar
area:portal-self-service
area:projection
area:workflow
type:adr-proposal
type:bug
type:chore
type:slice
No Label area:infra type:bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
eho
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: eho/register-referentie#91
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?