diff --git a/Dockerfile b/Dockerfile index fd744e1..af37e0b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,15 +1,4 @@ -FROM quay.io/keycloak/keycloak:latest as builder - -ENV KC_HEALTH_ENABLED=true - -WORKDIR /opt/keycloak - -# for demonstration purposes only -RUN keytool -genkeypair -storepass password -storetype PKCS12 -keyalg RSA -keysize 2048 -dname "CN=server" -alias server -ext "SAN:c=DNS:localhost,IP:127.0.0.1" -keystore conf/server.keystore -RUN /opt/keycloak/bin/kc.sh build - FROM quay.io/keycloak/keycloak:latest -COPY --from=builder /opt/keycloak/ /opt/keycloak/ ADD start.sh /start.sh ENV PORT=${PORT:-8080} diff --git a/README.md b/README.md index 54585b1..7821c29 100644 --- a/README.md +++ b/README.md @@ -9,17 +9,13 @@ Right now, auth.js keycloak is a simple docker deployment on ec2. ### Prerequisites -- External database - SSL certificates (generated with certbot/letsencrypt, for example) Then, the docker container is started like this: ```bash -export KEYCLOAK_DB_URL= export KEYCLOAK_ADMIN_PASSWORD= export KEYCLOAK_HOSTNAME=keycloak.authjs.dev -export KEYCLOAK_DB_USERNAME= -export KEYCLOAK_DB_PASSWORD= -docker run -d --name authjs-keycloak -v /path-to-letsencrypt-certificates:/certificates -p 443:443 -e KEYCLOAK_ADMIN=admin -e KEYCLOAK_ADMIN_PASSWORD=$KEYCLOAK_ADMIN_PASSWORD quay.io/keycloak/keycloak:latest start --features=token-exchange --https-certificate-file=/certificates/fullchain.pem --https-certificate-key-file=/certificates/privkey.pem --hostname=$KEYCLOAK_HOSTNAME --proxy=edge --https-port=443 --db=postgres --db-url=$KEYCLOAK_DB_URL --db-username=$KEYCLOAK_DB_USERNAME --db-password=$KEYCLOAK_DB_PASSWORD +docker run -d --name authjs-keycloak -v /path-to-letsencrypt-certificates:/certificates -p 443:443 -e KEYCLOAK_ADMIN=admin -e KEYCLOAK_ADMIN_PASSWORD=$KEYCLOAK_ADMIN_PASSWORD quay.io/keycloak/keycloak:latest start --features=token-exchange --https-certificate-file=/certificates/fullchain.pem --https-certificate-key-file=/certificates/privkey.pem --hostname=$KEYCLOAK_HOSTNAME --proxy=edge --https-port=443 ``` diff --git a/start.sh b/start.sh index 7ede762..a1f4be6 100755 --- a/start.sh +++ b/start.sh @@ -1,6 +1,6 @@ #!/usr/bin/env bash ARGS="$@" -/opt/keycloak/bin/kc.sh start --optimized $ARGS & +/opt/keycloak/bin/kc.sh $ARGS & KEYCLOAK_PID=$!