new access via .env

This commit is contained in:
Andreas Knuth 2024-05-21 11:09:30 -05:00
parent 1f5b92f5ad
commit 18b3447027
2 changed files with 60 additions and 38 deletions

View File

@ -1,28 +1,37 @@
DB_HOST=postgres DB_HOST=postgres
DB_PORT=5432 DB_PORT=5432
DB_SCHEMA=public DB_SCHEMA=public
POSTGRES_DB=keycloak DB_DATABASE="keycloak"
POSTGRES_USER=yb_keycloak DB_USER="keycloak"
POSTGRES_PASSWORD=randomlongalphanumericpassword DB_PASSWORD="password"
DB_VENDOR="postgres"
KEYCLOAK_CREATE_ADMIN_USER=true KEYCLOAK_ADMIN="admin"
KEYCLOAK_ADMIN_USER=keycloak-admin KEYCLOAK_ADMIN_PASSWORD="5600Wuppertal11"
KEYCLOAK_ADMIN_PASSWORD=randomlongalphanumericpassword # KC_DB="postgres"
KEYCLOAK_MANAGEMENT_USER=keycloak-manager # KC_DB_URL="jdbc:postgresql://database/keycloak"
KEYCLOAK_MANAGEMENT_PASSWORD=randomlongalphanumericpassword # POSTGRES_DB=keycloak
# POSTGRES_USER=keycloak
#POSTGRES_PASSWORD=randomlongalphanumericpassword
KEYCLOAK_DATABASE_HOST=${DB_HOST} # KEYCLOAK_CREATE_ADMIN_USER=true
KEYCLOAK_DATABASE_PORT=${DB_PORT} # KEYCLOAK_ADMIN_USER=keycloak-admin
KEYCLOAK_DATABASE_NAME=${POSTGRES_DB} # KEYCLOAK_ADMIN_PASSWORD=randomlongalphanumericpassword
KEYCLOAK_DATABASE_USER=${POSTGRES_USER} # KEYCLOAK_MANAGEMENT_USER=keycloak-manager
KEYCLOAK_DATABASE_PASSWORD=${POSTGRES_PASSWORD} # KEYCLOAK_MANAGEMENT_PASSWORD=randomlongalphanumericpassword
KEYCLOAK_DATABASE_SCHEMA=${DB_SCHEMA}
KEYCLOAK_PRODUCTION=true # KEYCLOAK_DATABASE_HOST=${DB_HOST}
KEYCLOAK_JDBC_PARAMS=sslmode=disable&connectTimeout=40000 # KEYCLOAK_DATABASE_PORT=${DB_PORT}
KEYCLOAK_EXTRA_ARGS="-Dkeycloak.profile.feature.scripts=enabled" # KEYCLOAK_DATABASE_NAME=${POSTGRES_DB}
# KEYCLOAK_DATABASE_USER=${POSTGRES_USER}
# KEYCLOAK_DATABASE_PASSWORD=${POSTGRES_PASSWORD}
# KEYCLOAK_DATABASE_SCHEMA=${DB_SCHEMA}
KEYCLOAK_ENABLE_HTTPS=true # KEYCLOAK_PRODUCTION=true
KEYCLOAK_HTTPS_USE_PEM=true # KEYCLOAK_JDBC_PARAMS=sslmode=disable&connectTimeout=40000
KEYCLOAK_HTTPS_CERTIFICATE_FILE=/opt/bitnami/keycloak/certs/fullchain.pem # KEYCLOAK_EXTRA_ARGS="-Dkeycloak.profile.feature.scripts=enabled"
KEYCLOAK_HTTPS_CERTIFICATE_KEY_FILE=/opt/bitnami/keycloak/certs/privkey.pem
# KEYCLOAK_ENABLE_HTTPS=true
# KEYCLOAK_HTTPS_USE_PEM=true
# KEYCLOAK_HTTPS_CERTIFICATE_FILE=/opt/bitnami/keycloak/certs/fullchain.pem
# KEYCLOAK_HTTPS_CERTIFICATE_KEY_FILE=/opt/bitnami/keycloak/certs/privkey.pem

View File

@ -8,32 +8,45 @@ services:
volumes: volumes:
- postgres_volume:/var/lib/postgresql/data - postgres_volume:/var/lib/postgresql/data
environment: environment:
POSTGRES_DB: keycloak POSTGRES_DB: ${DB_DATABASE}
POSTGRES_USER: keycloak POSTGRES_USER: ${DB_USER}
POSTGRES_PASSWORD: password POSTGRES_PASSWORD: ${DB_PASSWORD}
networks: networks:
- bizmatch - bizmatch
auth: auth:
container_name: keycloak container_name: keycloak
image: quay.io/keycloak/keycloak:latest image: quay.io/keycloak/keycloak:latest
command: ["start-dev"]
ports: ports:
- "8080:8080" - "8080:8080"
environment: environment:
- KEYCLOAK_ADMIN=admin DB_VENDOR: ${DB_VENDOR}
- KEYCLOAK_ADMIN_PASSWORD=aiaiaia # DB_ADDR: database
- KC_HOSTNAME_ADMIN=auth.bizmatch.net # DB_PORT: 5432
- KC_PROXY=edge # DB_SCHEMA: public
- KC_HOSTNAME=auth.bizmatch.net DB_DATABASE: ${DB_DATABASE}
- KC_METRICS_ENABLED=true DB_USER: ${DB_USER}
- KC_HEALTH_ENABLED=true DB_PASSWORD: ${DB_PASSWORD}
- KC_DB=postgres KEYCLOAK_ADMIN: ${KEYCLOAK_ADMIN}
- KC_DB_PASSWORD=password KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
- KC_DB_SCHEMA=public KC_PROXY_MODE: edge
- KC_DB_USERNAME=keycloak KC_METRICS_ENABLED: true
- KC_DB_URL_HOST=postgres KC_HTTP_ENABLED: true
- KC_DB_URL_DATABASE=keycloak # - KEYCLOAK_ADMIN=admin
- PROXY_ADDRESS_FORWARDING=true # - KEYCLOAK_ADMIN_PASSWORD=aiaiaia
# - KC_HOSTNAME_ADMIN=auth.bizmatch.net
# - KC_PROXY=edge
# - KC_HOSTNAME=auth.bizmatch.net
# - KC_METRICS_ENABLED=true
# - KC_HEALTH_ENABLED=true
# - KC_DB=postgres
# - KC_DB_PASSWORD=password
# - KC_DB_SCHEMA=public
# - KC_DB_USERNAME=keycloak
# - KC_DB_URL_HOST=postgres
# - KC_DB_URL_DATABASE=keycloak
# - PROXY_ADDRESS_FORWARDING=true
#- KC_LOG_LEVEL=ALL #- KC_LOG_LEVEL=ALL
depends_on: depends_on:
- postgres - postgres