Keycloak Docker Compose Generator

After generating your configuration:

1. Save docker-compose.yml to your project directory
2. If using a proxy, save the proxy config file alongside it
3. Run docker-compose up -d to start the services
4. Access Keycloak at http://localhost:8080 (or your configured domain)

Default admin credentials are set in the environment variables. Change them for production use.

With PostgreSQL (recommended): Data is stored in a Docker volume and persists across container restarts. This is suitable for development and production.

Without persistence (dev-file): Keycloak uses an embedded H2 database. All data is lost when the container stops. Use only for quick testing.

For production, always use PostgreSQL with proper backups and consider using external managed databases.

When using a reverse proxy, SSL termination happens at the proxy level. The generated configurations:

• Nginx: Includes placeholder for SSL certificates. Use certbot or your own certs.
• HAProxy: Configured for SSL passthrough or termination with PEM files.

For local development, you can use tools like mkcert to generate trusted local certificates.

This generator creates configurations suitable for development. For production:

• Secrets: Use Docker secrets or environment variable injection from a vault
• Clustering: Configure Keycloak clustering with Infinispan for high availability
• Monitoring: Add health checks, metrics endpoints, and logging drivers
• Backups: Implement automated database backups

Consider using Skycloak Managed Hosting for production workloads.