ohif-viewer/docker/OpenResty-Orthanc-Keycloak

Guide

Build docker container using:

• Build: docker build -t authproxy .
• Tag: docker tag authproxy:latest authproxy:staging

Start your docker container, and volume mount the directory containing the nginx-keycloak.conf configuration file. We also mount the current directory under /usr/share/nginx/html so any html files in the current directory will be hosted behind the authenticating proxy. Finally, we mapped port 80 on the host to port 80 in the container.

docker run -d -it -p 80:80 -v $PWD/:/config -v /:/usr/share/nginx/html authproxy -c /config/nginx.conf docker run -d -it -p 80:80 -v /:/config -v /:/usr/share/nginx/html authproxy -c /config/nginx-keycloak.conf

Orthanc

• Configuration
  • http://book.orthanc-server.com/users/configuration.html#configuration

Keycloak

Setup

Library we use to manage OpenID-Connect implicit flow: https://github.com/maxmantz/redux-oidc

• Set admin user/pass in docker-compose
• What are realms?
• Configure Clients
  • Create client
    • ClientID: pacs; save
  • Details page
    • Client Protocol: openid-connect
    • AccessType: Confidential
    • Picking a grant type: https://auth0.com/docs/api-auth/which-oauth-flow-to-use
      • Standard Flow: off
      • Implicit Flow: on
      • Direct Access: off
    • Root URL: http://127.0.0.1
    • Valid Redirect URIs: /studylist/*
    • Web Origins: *
  • Credentials Tab
    • Copy secret
• Manage: Users
  • Add User
    • Username: test
  • Credentials Tab
    • Password: test

Useful Commands

List containers: docker ps

Stop running all containers:

• Win: docker ps -a -q | ForEach { docker stop $_ }
• Linux: docker stop $(docker ps -a -q)

Interact w/ running container:

docker exec -it CONTAINER_NAME bash

Resources

• http://www.staticshin.com/programming/definitely-an-open-resty-guide/#access_by_lua

TODO

• Add build step for authproxy to docker-compose script