From 8a9bbeeb888065dc03a6f39d0ddf46b50f8365b4 Mon Sep 17 00:00:00 2001 From: kyy Date: Mon, 2 Feb 2026 14:42:21 +0900 Subject: [PATCH] =?UTF-8?q?OIDC=20=ED=97=A4=EB=8D=94=20=EC=B2=98=EB=A6=AC?= =?UTF-8?q?=20=EC=9C=84=ED=95=9C=20=EA=B2=8C=EC=9D=B4=ED=8A=B8=EC=9B=A8?= =?UTF-8?q?=EC=9D=B4=20=EB=B0=8F=20=EC=9D=B8=ED=94=84=EB=9D=BC=20=EC=84=A4?= =?UTF-8?q?=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- compose.ory.yaml | 8 +++----- docker-compose.yaml | 1 + gateway/nginx.conf | 2 ++ 3 files changed, 6 insertions(+), 5 deletions(-) diff --git a/compose.ory.yaml b/compose.ory.yaml index 3c90d7a7..44ddfac3 100644 --- a/compose.ory.yaml +++ b/compose.ory.yaml @@ -92,7 +92,7 @@ services: container_name: ory_hydra environment: - DSN=postgres://${ORY_POSTGRES_USER}:${ORY_POSTGRES_PASSWORD}@postgres_ory:5432/${HYDRA_DB:-ory_hydra}?sslmode=disable&max_conns=20 - - URLS_SELF_ISSUER=${HYDRA_PUBLIC_URL:-http://localhost:5000/oidc} + - URLS_SELF_ISSUER=${USERFRONT_URL:-http://localhost:5000}/oidc - URLS_LOGIN=${USERFRONT_URL:-http://localhost:5000}/login - URLS_CONSENT=${USERFRONT_URL:-http://localhost:5000}/consent - SECRETS_SYSTEM=${ORY_POSTGRES_PASSWORD} @@ -106,8 +106,6 @@ services: - ory-net - hydranet - - # --- Keto --- keto-migrate: image: oryd/keto:${KETO_VERSION:-v25.4.0} @@ -229,8 +227,8 @@ services: - hydranet volumes: - ory_postgres_data: - ory_clickhouse_data: + ory_postgres_data: + ory_clickhouse_data: networks: ory-net: diff --git a/docker-compose.yaml b/docker-compose.yaml index 981831c9..2b5e4ece 100644 --- a/docker-compose.yaml +++ b/docker-compose.yaml @@ -95,6 +95,7 @@ services: - APP_ENV=${APP_ENV} networks: - baron_net + - ory-net depends_on: backend: condition: service_healthy diff --git a/gateway/nginx.conf b/gateway/nginx.conf index 9b94fe8a..eeb6f234 100644 --- a/gateway/nginx.conf +++ b/gateway/nginx.conf @@ -21,6 +21,8 @@ log_format json_combined escape=json server { listen 5000; + client_header_buffer_size 16k; + large_client_header_buffers 4 64k; include /etc/nginx/mime.types; resolver 127.0.0.11 valid=10s ipv6=off;