Modèle:Keycloak:Docker-compose.yml

De Site à José Mans

services:   keycloak:     container_name: keycloak2     user: "keycloak:5020" # UID and GID from /etc/passwd container / image     image: keycloak:26.3.4     #image: quay.io/keycloak/keycloak:26.3.2     ports:     #- ":8084:8080"     #- ":8087:9000"     - ":8086:8443"     volumes:     - /etc/letsencrypt/:/etc/letsencrypt/:ro     environment:     # BASE DBASE     #KC_DB: mariadb # Already declared in the image!     KC_DB_URL: jdbc:mariadb://172.17.0.1/keycloak?characterEncoding=UTF-8&useSSL=false     KC_DB_URL_PORT: 3306     KC_DB_USERNAME: kuser     KC_DB_PASSWORD: "UnMotDePassTrèsFort" # The database password     # Paramètres d'administration de Keycloak     #Déclassé: KEYCLOAK_ADMIN: admin     #Déclassé: KEYCLOAK_ADMIN_PASSWORD: admin     KC_BOOTSTRAP_ADMIN_USERNAME: admin     KC_BOOTSTRAP_ADMIN_PASSWORD: *********     # Hostname and Proxy Configuration     # Base URL where Keycloak can be accessed from a local network or the internet     KC_HOSTNAME: https://domain.tld/auth/ # ou l'option: command: ... --hostname=https://domain.tld/auth/     # Health Settings and Metrics     #KC_HEALTH_ENABLED: "true"     #KC_METRICS_ENABLED: "true"     # LOGs     KC_LOG: console     KC_LOG_LEVEL: info     KC_LOG_COLOR: true     # Too verbose :     #KC_LOG_CONSOLE_LEVEL: all         #Valid SSL certificates and hourly reloading     KC_HTTPS_CERTIFICATE_FILE: /etc/letsencrypt/live/domain.tld/fullchain.pem     KC_HTTPS_CERTIFICATE_KEY_FILE: /etc/letsencrypt/live/domain.tld/privkey.pem     KC_HTTPS_CERTIFICATES_RELOAD_PERIOD: 1h     # Version for tests     #command: start-dev --hostname-strict=false --proxy-headers forwarded --verbose     command: start --verbose --http-enabled=true --proxy-trusted-addresses=IP_SERVEUR/32,127.0.0.0/8 --proxy-headers=xforwarded --optimized