Keycloak/docker-compose.yml at main · CoopCodeCommun/Keycloak · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
services:
  keycloack-postgres:
    image: postgres:16
    container_name: keycloack-postgres
    hostname: keycloack-postgres
    restart: unless-stopped
    environment:
      POSTGRES_DB: ${POSTGRESQL_DB}
      POSTGRES_USER: ${POSTGRESQL_USER}
      POSTGRES_PASSWORD: ${POSTGRESQL_PASS}
    volumes:
      - ./postgres_data:/var/lib/postgresql/data
    networks:
      - local-keycloak

  keycloak:
    depends_on:
      - keycloack-postgres
    container_name: keycloak
    image: quay.io/keycloak/keycloak:26.0.7
    environment:
      KC_BOOTSTRAP_ADMIN_USERNAME: ${KC_BOOTSTRAP_ADMIN_USERNAME} # Cred' for temp admin user
      KC_BOOTSTRAP_ADMIN_PASSWORD: ${KC_BOOTSTRAP_ADMIN_PASSWORD}
      KC_HOSTNAME_ADMIN_URL: "https://${VIRTUAL_HOST}"
      VIRTUAL_HOST: ${VIRTUAL_HOST}
      KC_HOSTNAME: ${VIRTUAL_HOST}
      PROXY_ADDRESS_FORWARDING: "true" # <==== very important if you use reverse proxy
      KC_HOSTNAME_STRICT_HTTPS: "true"
      KC_PROXY: "edge"
      KC_DB: postgres
      KC_DB_URL_HOST: keycloack-postgres
      KC_DB_USERNAME: ${POSTGRESQL_USER}
      KC_DB_PASSWORD: ${POSTGRESQL_PASS}
      KC_DB_URL_DATABASE: ${POSTGRESQL_DB}
    volumes:
      - ./data/keycloak:/opt/keycloak/data
      - ./src/main/resources/theme/:/opt/keycloak/themes/
    restart: unless-stopped
    networks:
      - local-keycloak
      - frontend
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend"
      - "traefik.http.routers.keycloak.tls.certresolver=myresolver"
      - "traefik.http.routers.keycloak.rule=Host(`$VIRTUAL_HOST`)"
      - "traefik.http.services.keycloak.loadbalancer.server.port=8080"

    command: "start --hostname https://${VIRTUAL_HOST} --proxy-headers xforwarded"

networks:
  frontend:
    external: true
  local-keycloak:
    internal: true