chore: production keycloak dockerfile

deploy/Dockerfile.keycloak

@@ -0,0 +1,7 @@
+FROM quay.io/keycloak/keycloak:26.0.0
+
+COPY sso/certs /etc/x509/https
+
+RUN /opt/keycloak/bin/kc.sh build
+
+ENTRYPOINT ["/opt/keycloak/bin/kc.sh", "start"]

docker-compose.dev.yaml

@@ -0,0 +1,13 @@
+services:
+  keycloak:
+      image: quay.io/keycloak/keycloak:26.0.0
+      command: ["start-dev"]
+      container_name: keycloak
+      environment:
+        KC_BOOTSTRAP_ADMIN_USERNAME: admin
+        KC_BOOTSTRAP_ADMIN_PASSWORD: admin
+        KEYCLOAK_USER: admin
+        KEYCLOAK_PASSWORD: admin
+        KEYCLOAK_IMPORT: /tmp/realm-export.json
+      ports:
+        - 8080:8080

docker-compose.yaml

@@ -12,4 +12,20 @@ services:
       context: .
       dockerfile: deploy/Dockerfile.nginx
     ports:
-      - "80:80"
+      - "80:80"
+
+  keycloak:
+    build:
+      context: .
+      dockerfile: deploy/Dockerfile.keycloak
+    container_name: keycloak
+    # read from .env file
+    env_file: "sso/.env"
+    environment:
+      KC_BOOTSTRAP_ADMIN_USERNAME: admin
+      KC_BOOTSTRAP_ADMIN_PASSWORD: admin
+      KEYCLOAK_USER: admin
+      KEYCLOAK_PASSWORD: admin
+      KEYCLOAK_IMPORT: /tmp/realm-export.json
+    ports:
+      - 8080:8080

sso/.env.example

@@ -0,0 +1,9 @@
+KEYCLOAK_ADMIN=
+KEYCLOAK_ADMIN_PASSWORD=
+KC_HOSTNAME=
+KC_DB_URL=
+KC_DB=
+KC_DB_USERNAME=
+KC_DB_PASSWORD=
+KC_HTTPS_CERTIFICATE_FILE=
+KC_HTTPS_CERTIFICATE_KEY_FILE=