As shipped kanboard.

deployments/kanboard-deployment.yaml

@@ -37,9 +37,8 @@ spec:
         - --provider=keycloak-oidc
         - --client-id=kanboard
         - --client-secret=oT6dMBS87jc385utLumMoffJ9MqLEGRY
-        - --redirect-url=http://kanboard.jpace121.net
+        - --redirect-url=https://kanboard.jpace121.net
         - --oidc-issuer-url=https://auth.jpace121.net/realms/jpace121-main
-        - --pass-user-headers=true
         - --reverse-proxy=true
         - --upstream=http://localhost:80/
         - --http-address=0.0.0.0:8080

images/kanboard-conf.php

@@ -4,17 +4,4 @@ define('DEBUG', false);
 define('LOG_DRIVER', 'stdout');
 
 // Enable/disable reverse proxy authentication
-define('REVERSE_PROXY_AUTH', true); // Set this value to true
-
-// The HTTP header to retrieve. If not specified, REMOTE_USER is the default
-define('REVERSE_PROXY_USER_HEADER', 'HTTP_FORWARDED_USER');
-
-// The default Kanboard admin for your organization.
-// Since everything should be filtered by the reverse proxy,
-// you should want to have a bootstrap admin user.
-define('REVERSE_PROXY_DEFAULT_ADMIN', 'jimmy');
-
-// The default domain to assume for the email address.
-// In case the username is not an email address, it
-// will be updated automatically as USER@mydomain.com
-define('REVERSE_PROXY_DEFAULT_DOMAIN', 'internal.jpace121.net');
+define('REVERSE_PROXY_AUTH', false); // Set this value to true