Keycloak

keycloak get started...

mariadb Datenbank einrichten

mysql -u root -p 
CREATE DATABASE keycloak;
GRANT ALL ON keycloak.* TO 'keycloak'@'localhost' IDENTIFIED BY 'strongpassword';
FLUSH PRIVILEGES;
EXIT;

downloaden von keycloak

wget https://github.com/keycloak/keycloak/releases/download/22.0.5/keycloak-22.0.5.tar.gz
tar xfz keycloak-22.0.5.tar.gz
cd keycloak-22.0.5

Datenbank konfigurieren in conf/keycloak.conf

db=mariadb
db-username=keycloak
db-password=strongpassword
db-url=jdbc:mariadb://localhost:3306/keycloak
hostname=keycloak.example.org

Letsencrypt zertifikate konfigurieren

https-certificate-file=/etc/letsencrypt/live/<domain>/cert.pem
https-certificate-key-file=/etc/letsencrypt/live/<domain>/privkey.pem

Ports konfigurieren

http-port=8080
https-port=8443

Http verbindungen deaktivieren

http-enabled=false

(optional) haproxy anpassen und proxy konfigurieren

proxy=passthrough

Im Dev-Modus starten um Admin account anlegen zu können

bin/kc.sh start-dev

Im Production modus starten

bin/kc.sh build
bin/kc.sh start

How to use Let's Encrypt certificates with Keycloak