about summary refs log tree commit diff
path: root/third_party/apereo-cas/overlay/etc/cas/config/cas.properties
diff options
context:
space:
mode:
authorLuke Granger-Brown <hg@lukegb.com>2020-07-07T22·54+0000
committerlukegb <lukegb@tvl.fyi>2020-07-08T17·49+0000
commit2c7e9986e2337959a25d449f9d18b60992dd31ea (patch)
treea378e59c03ddebc92dff1f681a31b0d2c1a6e7a5 /third_party/apereo-cas/overlay/etc/cas/config/cas.properties
parent37ec60c70629fa5f6ace47488ba035a9a0bbae96 (diff)
chore(apereo-cas): fix up configuration r/1239
- X-Forwarded-Proto support so it knows it's behind TLS
- Remove extraneous logs and just log to stdout so it's caught be systemd

Change-Id: I650777bbfd24a1922f26967ffff7da06d14b6639
Reviewed-on: https://cl.tvl.fyi/c/depot/+/952
Tested-by: BuildkiteCI
Reviewed-by: glittershark <grfn@gws.fyi>
Diffstat (limited to 'third_party/apereo-cas/overlay/etc/cas/config/cas.properties')
-rw-r--r--third_party/apereo-cas/overlay/etc/cas/config/cas.properties8
1 files changed, 8 insertions, 0 deletions
diff --git a/third_party/apereo-cas/overlay/etc/cas/config/cas.properties b/third_party/apereo-cas/overlay/etc/cas/config/cas.properties
index 9ef983b174ac..e11d41fdd6fe 100644
--- a/third_party/apereo-cas/overlay/etc/cas/config/cas.properties
+++ b/third_party/apereo-cas/overlay/etc/cas/config/cas.properties
@@ -8,6 +8,14 @@ server.port=8443
 server.address=127.0.0.1
 server.ssl.enabled=false
 
+# Enable X-Forwarded-For using Tomcat.
+server.forward-headers-strategy=NATIVE
+server.tomcat.remoteip.remote-ip-header=x-forwarded-for
+server.tomcat.remoteip.protocol-header=x-forwarded-proto
+
+server.tomcat.basedir=/etc/cas/tomcat
+server.servlet.context-path=/
+
 cas.authn.saml-idp.entity-id=https://login.tvl.fyi
 
 cas.authn.accept.users=