initial dockerfiles

keycloak/.env

@@ -0,0 +1,28 @@
+DB_HOST=postgres
+DB_PORT=5432
+DB_SCHEMA=public
+POSTGRES_DB=keycloak
+POSTGRES_USER=yb_keycloak
+POSTGRES_PASSWORD=randomlongalphanumericpassword
+
+KEYCLOAK_CREATE_ADMIN_USER=true
+KEYCLOAK_ADMIN_USER=keycloak-admin
+KEYCLOAK_ADMIN_PASSWORD=randomlongalphanumericpassword
+KEYCLOAK_MANAGEMENT_USER=keycloak-manager
+KEYCLOAK_MANAGEMENT_PASSWORD=randomlongalphanumericpassword
+
+KEYCLOAK_DATABASE_HOST=${DB_HOST}
+KEYCLOAK_DATABASE_PORT=${DB_PORT}
+KEYCLOAK_DATABASE_NAME=${POSTGRES_DB}
+KEYCLOAK_DATABASE_USER=${POSTGRES_USER}
+KEYCLOAK_DATABASE_PASSWORD=${POSTGRES_PASSWORD}
+KEYCLOAK_DATABASE_SCHEMA=${DB_SCHEMA}
+
+KEYCLOAK_PRODUCTION=true
+KEYCLOAK_JDBC_PARAMS=sslmode=disable&connectTimeout=40000
+KEYCLOAK_EXTRA_ARGS="-Dkeycloak.profile.feature.scripts=enabled"
+
+KEYCLOAK_ENABLE_HTTPS=true
+KEYCLOAK_HTTPS_USE_PEM=true
+KEYCLOAK_HTTPS_CERTIFICATE_FILE=/opt/bitnami/keycloak/certs/fullchain.pem
+KEYCLOAK_HTTPS_CERTIFICATE_KEY_FILE=/opt/bitnami/keycloak/certs/privkey.pem

keycloak/docker-compose.yml

@@ -0,0 +1,49 @@
+version: '3.8'
+
+services:
+
+  postgres:
+      image: postgres:15.5-alpine3.19
+      volumes:
+        - ./postgres_data:/var/lib/postgresql/data
+      environment:
+        POSTGRES_DB: keycloak
+        POSTGRES_USER: keycloak
+        POSTGRES_PASSWORD: password
+      ports:
+        - "5432:5432"
+      networks:
+        - bizmatch
+
+  auth:
+    image: quay.io/keycloak/keycloak:23.0.7
+    ports:
+      - "8080:8080"
+    environment:
+      - KEYCLOAK_ADMIN=admin
+      - KEYCLOAK_ADMIN_PASSWORD=aiaiaia
+      - KC_HOSTNAME_ADMIN=auth.bizmatch.net
+      - KC_PROXY=edge
+      - KC_HOSTNAME=auth.bizmatch.net
+      - KC_METRICS_ENABLED=true
+      - KC_HEALTH_ENABLED=true
+      - KC_DB=postgres
+      - KC_DB_PASSWORD=password
+      - KC_DB_SCHEMA=public
+      - KC_DB_USERNAME=keycloak
+      - KC_DB_URL_HOST=postgres
+      - KC_DB_URL_DATABASE=keycloak
+        #- KC_LOG_LEVEL=ALL
+    depends_on:
+      - postgres
+    command:
+      - start
+    volumes:
+      - ./auth/import:/opt/keycloak/data/import
+      - ./keywind.jar:/opt/keycloak/providers/keywind.jar
+    networks:
+      - bizmatch
+
+networks:
+  bizmatch:
+    external: true