Modèle:Keycloak:Docker-compose.yml
services: keycloak: container_name: keycloak2 user: "keycloak:5020" # UID and GID from /etc/passwd container / image image: keycloak:26.3.4 #image: quay.io/keycloak/keycloak:26.3.2 ports: #- ":8084:8080" #- ":8087:9000" - ":8086:8443" volumes: - /etc/letsencrypt/:/etc/letsencrypt/:ro environment: # BASE DBASE #KC_DB: mariadb # Already declared in the image! KC_DB_URL: jdbc:mariadb://172.17.0.1/keycloak?characterEncoding=UTF-8&useSSL=false KC_DB_URL_PORT: 3306 KC_DB_USERNAME: kuser KC_DB_PASSWORD: "UnMotDePassTrèsFort" # The database password # Paramètres d'administration de Keycloak #Déclassé: KEYCLOAK_ADMIN: admin #Déclassé: KEYCLOAK_ADMIN_PASSWORD: admin KC_BOOTSTRAP_ADMIN_USERNAME: admin KC_BOOTSTRAP_ADMIN_PASSWORD: ********* # Hostname and Proxy Configuration # Base URL where Keycloak can be accessed from a local network or the internet KC_HOSTNAME: https://domain.tld/auth/ # ou l'option: command: ... --hostname=https://domain.tld/auth/ # Health Settings and Metrics #KC_HEALTH_ENABLED: "true" #KC_METRICS_ENABLED: "true" # LOGs KC_LOG: console KC_LOG_LEVEL: info KC_LOG_COLOR: true # Too verbose : #KC_LOG_CONSOLE_LEVEL: all #Valid SSL certificates and hourly reloading KC_HTTPS_CERTIFICATE_FILE: /etc/letsencrypt/live/domain.tld/fullchain.pem KC_HTTPS_CERTIFICATE_KEY_FILE: /etc/letsencrypt/live/domain.tld/privkey.pem KC_HTTPS_CERTIFICATES_RELOAD_PERIOD: 1h # Version for tests #command: start-dev --hostname-strict=false --proxy-headers forwarded --verbose command: start --verbose --http-enabled=true --proxy-trusted-addresses=IP_SERVEUR/32,127.0.0.0/8 --proxy-headers=xforwarded --optimized
