From 7635ae6470837e993b39ff2092410be57774ead9 Mon Sep 17 00:00:00 2001 From: Falco Winkler <8613031+falcowinkler@users.noreply.github.com> Date: Thu, 4 Jul 2024 22:51:26 +0200 Subject: [PATCH] simplify docker build --- Dockerfile | 11 ----------- README.md | 6 +----- start.sh | 2 +- 3 files changed, 2 insertions(+), 17 deletions(-) diff --git a/Dockerfile b/Dockerfile index fd744e1..af37e0b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,15 +1,4 @@ -FROM quay.io/keycloak/keycloak:latest as builder - -ENV KC_HEALTH_ENABLED=true - -WORKDIR /opt/keycloak - -# for demonstration purposes only -RUN keytool -genkeypair -storepass password -storetype PKCS12 -keyalg RSA -keysize 2048 -dname "CN=server" -alias server -ext "SAN:c=DNS:localhost,IP:127.0.0.1" -keystore conf/server.keystore -RUN /opt/keycloak/bin/kc.sh build - FROM quay.io/keycloak/keycloak:latest -COPY --from=builder /opt/keycloak/ /opt/keycloak/ ADD start.sh /start.sh ENV PORT=${PORT:-8080} diff --git a/README.md b/README.md index 54585b1..7821c29 100644 --- a/README.md +++ b/README.md @@ -9,17 +9,13 @@ Right now, auth.js keycloak is a simple docker deployment on ec2. ### Prerequisites -- External database - SSL certificates (generated with certbot/letsencrypt, for example) Then, the docker container is started like this: ```bash -export KEYCLOAK_DB_URL= export KEYCLOAK_ADMIN_PASSWORD= export KEYCLOAK_HOSTNAME=keycloak.authjs.dev -export KEYCLOAK_DB_USERNAME= -export KEYCLOAK_DB_PASSWORD= -docker run -d --name authjs-keycloak -v /path-to-letsencrypt-certificates:/certificates -p 443:443 -e KEYCLOAK_ADMIN=admin -e KEYCLOAK_ADMIN_PASSWORD=$KEYCLOAK_ADMIN_PASSWORD quay.io/keycloak/keycloak:latest start --features=token-exchange --https-certificate-file=/certificates/fullchain.pem --https-certificate-key-file=/certificates/privkey.pem --hostname=$KEYCLOAK_HOSTNAME --proxy=edge --https-port=443 --db=postgres --db-url=$KEYCLOAK_DB_URL --db-username=$KEYCLOAK_DB_USERNAME --db-password=$KEYCLOAK_DB_PASSWORD +docker run -d --name authjs-keycloak -v /path-to-letsencrypt-certificates:/certificates -p 443:443 -e KEYCLOAK_ADMIN=admin -e KEYCLOAK_ADMIN_PASSWORD=$KEYCLOAK_ADMIN_PASSWORD quay.io/keycloak/keycloak:latest start --features=token-exchange --https-certificate-file=/certificates/fullchain.pem --https-certificate-key-file=/certificates/privkey.pem --hostname=$KEYCLOAK_HOSTNAME --proxy=edge --https-port=443 ``` diff --git a/start.sh b/start.sh index 7ede762..a1f4be6 100755 --- a/start.sh +++ b/start.sh @@ -1,6 +1,6 @@ #!/usr/bin/env bash ARGS="$@" -/opt/keycloak/bin/kc.sh start --optimized $ARGS & +/opt/keycloak/bin/kc.sh $ARGS & KEYCLOAK_PID=$!