From edd705c9e9d8775d027b8d259f4f2016471295fd Mon Sep 17 00:00:00 2001
From: Hans Keeler <hans.keeler@cfpb.gov>
Date: Tue, 5 Dec 2017 12:11:05 -0500
Subject: [PATCH] Disable http2 on keycloak. Likely cause of reverse proxy
 issues.

---
 keycloak/standalone.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/keycloak/standalone.xml b/keycloak/standalone.xml
index ffcb32a..85cb339 100644
--- a/keycloak/standalone.xml
+++ b/keycloak/standalone.xml
@@ -467,7 +467,7 @@
         <subsystem xmlns="urn:jboss:domain:undertow:4.0">
             <buffer-cache name="default"/>
             <server name="default-server">
-                <http-listener name="default" socket-binding="http" proxy-address-forwarding="true" redirect-socket="proxy-https" enable-http2="true"/>
+                <http-listener name="default" socket-binding="http" proxy-address-forwarding="true" redirect-socket="proxy-https" enable-http2="false"/>
                 <host name="default-host" alias="localhost">
                     <location name="/" handler="welcome-content"/>
                     <http-invoker security-realm="ApplicationRealm"/>