Foundry VTT stack with an Oauth2 proxy restricting access to it. Keycloak is used as identity provider.
Create a .env
file containing something similar to :
KEYCLOAK_DB_PASSWORD=XXXXXXXXXXXXXXXXXXXXX
KEYCLOAK_ADMIN_PASSWORD=XXXXXXXXXXXXXXXXXX
KEYCLOAK_DATA_PATH=/path/to/keycloak/data
KEYCLOAK_PUBLIC_ADDRESS=idp.my-domain.com
OAUTH2_PROXY_COOKIE_SEED=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
OAUTH2_PROXY_COOKIE_DOMAIN=fvtt.my-domain.com
OAUTH2_PROXY_WHITELIST_DOMAIN=fvtt.my-domain.com
OAUTH2_PROXY_CLIENT_ID=foundryvtt
OAUTH2_PROXY_CLIENT_SECRET=XXXXXXXXXXXXXXXXXXXXXXXXX
OAUTH2_PROXY_REDIRECT_URL=https://fvtt.my-domain.com/oauth2/callback
OAUTH2_PROXY_OIDC_ISSUER_URL=https://idp.my-domain.com/realms/foundryvtt
FOUNDRYVTT_DATA_PATH=/path/to/foundryvtt/data
FOUNDRYVTT_PUBLIC_ADDRESS=fvtt.my-domain.com
I included a great Foundry VTT Keycloak theme coming from here.