Dotfiles/setup/modules/FreeipaAnsible
Amir Alexander Abdelbaki adea0f457d fix(ansipa): reliable nginx + keycloak healthchecks
Both containers were reporting "unhealthy" while serving fine — the
healthchecks I added probed the wrong address/endpoint:

- nginx: `wget localhost` resolves to IPv6 ::1 inside the container, but nginx
  listens on IPv4 0.0.0.0:80 only, so the probe was refused. Use 127.0.0.1.
- keycloak: with KC_HTTP_RELATIVE_PATH=/auth, /health/ready on the 9000
  management port returns 404. Probe /auth/realms/master on the serving port
  8080 instead (bash /dev/tcp — the image has no curl/wget).

Verified all five containers report healthy and the gateway serves /, /ipa/ui/,
/cmk/ and /auth/ correctly.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MUhrcFU8J1Hnf7vNqNxZNi
2026-07-02 13:22:24 +02:00
..
ansible fix(ansipa): hostname-binary-free FQDN + push-mode orchestration (NAT path) 2026-07-02 12:25:03 +02:00
autofs-pkgbuild fix(ansipa): FreeIPA enrollment for Arch/Fedora/RHEL + autofs AUR workaround 2026-07-02 11:27:46 +02:00
image fix(ansipa): reliable nginx + keycloak healthchecks 2026-07-02 13:22:24 +02:00
auto-enroll-ansible.sh Update setup/modules/FreeipaAnsible/auto-enroll-ansible.sh 2026-04-27 16:38:02 +02:00
copilot-explains.txt Update setup/modules/FreeipaAnsible/copilot-explains.txt 2026-04-27 17:00:37 +02:00
freeipa-client-answerfile.json setup: add FreeIPA server module and generic client script 2026-05-18 11:12:31 +02:00
freeipa-client.sh fix(ansipa): FreeIPA enrollment for Arch/Fedora/RHEL + autofs AUR workaround 2026-07-02 11:27:46 +02:00
freeipa-enroll.sh fix(ansipa): FreeIPA enrollment for Arch/Fedora/RHEL + autofs AUR workaround 2026-07-02 11:27:46 +02:00