docker-compose-self-ssl.yml

version: '2.1'

networks:
  keycloak-network:

volumes:
    keycloak-postgres-data:
    keycloak-nginx-ssl:

services:
  postgres:
    image: postgres:9.6-alpine
    container_name: postgres
    networks:
      - keycloak-network
    volumes:
      - keycloak-postgres-data:/var/lib/postgresql/data
    environment:
      - POSTGRES_DB=keycloak
      - POSTGRES_USER=keycloak
      - POSTGRES_PASSWORD=password
    restart: unless-stopped
  keycloak:
    image: jboss/keycloak-postgres
    container_name: keycloak
    links:
      - postgres
    networks:
      - keycloak-network
    depends_on:
      - postgres
    environment:
      - POSTGRES_DATABASE=keycloak
      - POSTGRES_USER=keycloak
      - POSTGRES_PASSWORD=password
      - PROXY_ADDRESS_FORWARDING=true
      - KEYCLOAK_USER=admin
      - KEYCLOAK_PASSWORD=admin
      # JBoss is using legacy linking environment variables
      - POSTGRES_PORT_5432_TCP_ADDR=postgres
      - POSTGRES_PORT_5432_TCP_PORT=5432
    restart: unless-stopped
  nginx:
    image: ernsheong/keycloak-nginx-self-ssl
    container_name: nginx
    networks:
      - keycloak-network
    depends_on:
      - keycloak
    volumes:
      - keycloak-nginx-ssl:/etc/nginx/ssl
    environment:
      - KEYCLOAK_HOST=keycloak
      - KEYCLOAK_PORT=8080
      - KEYCLOAK_DOMAIN=www.example.com
    ports:
      - "443:443"
    restart: unless-stopped