Introduce keycloak

README.md

@@ -10,5 +10,4 @@
 1. Create `admin` user, add to `sudo` group
 1. Put all your secrets into `/opt/.env` file
 1. Put S3 secrets into `/home/admin/.aws/credentials` (according to boto3)
-1. Put Flask dashboard config into `/opt/dashboard.cfg` file
 1. Run ansible

docker-compose.yml

@@ -1,5 +1,4 @@
 ---
-version: '3.8'
 services:
     app:
         build:
@@ -18,6 +17,7 @@ services:
             - rabbitmq
             - image_resizer
             - redis
+            - keycloak
 
     image_resizer:
         build:
@@ -29,6 +29,36 @@ services:
         volumes:
             - ./image_resizer:/opt/image_resizer
             - images:/images
+
+    postgres:
+        image: postgres:16.0
+        environment:
+            POSTGRES_USER: testkeycloakuser
+            POSTGRES_PASSWORD: testkeycloakpassword
+            POSTGRES_DB: testkeycloakdb
+        ports:
+            - 5432:5432
+        volumes:
+            - postgres_data:/var/lib/postgresql/data
+        restart: always
+
+    keycloak:
+        image: keycloak/keycloak:26.0.1
+        environment:
+            - KEYCLOAK_ADMIN=admin
+            - KEYCLOAK_ADMIN_PASSWORD=admin
+            - KC_DB=postgres
+            - KC_DB_URL=jdbc:postgresql://postgres:5432/testkeycloakdb
+            - KC_DB_USERNAME=testkeycloakuser
+            - KC_DB_PASSWORD=testkeycloakpassword
+            - KC_HOSTNAME=localhost
+            - KC_PROXY=edge
+            - KC_LOG_LEVEL=DEBUG
+        ports:
+            - 8080:8080
+        command: "start-dev"
+        depends_on:
+            - postgres
 
     elasticsearch:
         build:
@@ -75,3 +105,4 @@ services:
 volumes:
     esdata01:
     images:
+    postgres_data: