Node-RED - Keycloak - Self-signed certificate in certificate chain

[TotallyInformation]

@Markus_M

In the production system I have an IIS reverse-proxy but I try to use even all security features from node-red additionally.

In that case, rely on IIS security which is fully integrated with Active Directory, not on the separate Node-RED security. It will give far better and more robust protection. Just make sure to set Windows Firewall to disallow any access to port 1880 outside of localhost so that users can only use IIS ports 80/443.