hopu/keycloak repository overview

FROM jboss/keycloak:6.0.0
USER jboss
RUN sed -i -e 's/<web-context>auth<\/web-context>/<web-context>keycloak\/auth<\/web-context>/' $JBOSS_HOME/standalone/configuration/standalone.xml
RUN sed -i -e 's/<web-context>auth<\/web-context>/<web-context>keycloak\/auth<\/web-context>/' $JBOSS_HOME/standalone/configuration/standalone-ha.xml
RUN sed -i -e 's/name="\/"/name="\/keycloak\/"/' $JBOSS_HOME/standalone/configuration/standalone.xml
RUN sed -i -e 's/name="\/"/name="\/keycloak\/"/' $JBOSS_HOME/standalone/configuration/standalone-ha.xml
RUN sed -i -e 's/\/auth/\/keycloak\/auth"/' $JBOSS_HOME/welcome-content/index.html

version: '3.3'

services:
  keycloak:
    image: hopu/keycloak:6.0.0
    ports:
      - 8180:8080
    environment:
      - KEYCLOAK_USER=keycloak
      - KEYCLOAK_PASSWORD=keycloak
      - DB_VENDOR=postgres
      - DB_ADDR=keycloak-db
      - DB_PORT=5432
      - DB_DATABASE=keycloak
      - DB_USER=keycloak
      - DB_PASSWORD=keycloak
      - ROOT_LOGLEVEL=DEBUG
      - PROXY_ADDRESS_FORWARDING=true
    networks:
      - keycloak-gatekeeper-network

networks:
  keycloak-gatekeeper-network:
    external: true

map $http_upgrade $connection_upgrade {
    default         upgrade;
    ''              close;
}

server {
    listen                  80;
    server_name             example.local;

    location /keycloak/ {
        proxy_pass              http://keycloak:8080/;
        proxy_http_version      1.1;
        proxy_set_header        Upgrade            $http_upgrade;
        proxy_set_header        Connection         $connection_upgrade;
        proxy_set_header        Host               $host;
        proxy_set_header        X-Real-IP          $remote_addr;
        proxy_set_header        X-Forwarded-For    $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Host   $host;
        proxy_set_header        X-Forwarded-Server $host;
        proxy_set_header        X-Forwarded-Port   $server_port;
        proxy_set_header        X-Forwarded-Proto  $scheme;
    }

    location /keycloak/auth/ {
        proxy_pass              http://keycloak:8080/keycloak/auth/;
        proxy_http_version      1.1;
        proxy_set_header        Upgrade            $http_upgrade;
        proxy_set_header        Connection         $connection_upgrade;
        proxy_set_header        Host               $host;
        proxy_set_header        X-Real-IP          $remote_addr;
        proxy_set_header        X-Forwarded-For    $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Host   $host;
        proxy_set_header        X-Forwarded-Server $host;
        proxy_set_header        X-Forwarded-Port   $server_port;
        proxy_set_header        X-Forwarded-Proto  $scheme;
    }

}

version: '3.3'

services:

  reverse_proxy:
    image: nginx:1.17.3
    ports:
     - target: 80
       published: 80
       protocol: tcp
       mode: host
    configs:
      - source: proxy-conf
        target: /etc/nginx/conf.d/proxy.conf
    networks:
      keycloak-gatekeeper-network:
        aliases:
          - example.local

configs:
  proxy-conf:
    file: ./proxy.nginx

networks:
  keycloak-gatekeeper-network:
    external: true