deleted: main_dc/keycloak/.env.keycloak
deleted: main_dc/keycloak/Dockerfile deleted: main_dc/keycloak/keycloak.conf deleted: main_dc/keycloak/realm-config/setup-realm.json
This commit is contained in:
@@ -1,22 +0,0 @@
|
||||
# Keycloak
|
||||
KEYCLOAK_VERSION=24.0.4
|
||||
KEYCLOAK_USER=admin
|
||||
KEYCLOAK_PASSWORD=admin123
|
||||
KEYCLOAK_DB_USER=keycloak
|
||||
KEYCLOAK_DB_PASSWORD=keycloak123
|
||||
KEYCLOAK_DB_NAME=keycloak
|
||||
|
||||
# Database
|
||||
POSTGRES_VERSION=15
|
||||
POSTGRES_DB=keycloak
|
||||
POSTGRES_USER=keycloak
|
||||
POSTGRES_PASSWORD=keycloak123
|
||||
|
||||
# Domains
|
||||
KEYCLOAK_FRONTEND_URL=https://auth.yalarba.ru
|
||||
DOMAIN_YALARBA=yalarba.ru
|
||||
DOMAIN_BEGUSHIYBASHKIR=begushiybashkir.ru
|
||||
|
||||
# Internal
|
||||
KEYCLOAK_HTTP_PORT=8080
|
||||
KEYCLOAK_INTERNAL_PORT=8080
|
||||
@@ -1,17 +0,0 @@
|
||||
FROM quay.io/keycloak/keycloak:24.0.4 as builder
|
||||
|
||||
# Устанавливаем фичи и собираем optimized образ
|
||||
RUN /opt/keycloak/bin/kc.sh build --db=postgres --features=token-exchange,admin-fine-grained-authz --optimized
|
||||
|
||||
FROM quay.io/keycloak/keycloak:24.0.4
|
||||
|
||||
# Копируем собранный optimized образ
|
||||
COPY --from=builder /opt/keycloak/ /opt/keycloak/
|
||||
|
||||
WORKDIR /opt/keycloak
|
||||
|
||||
# Экспортируем порт
|
||||
EXPOSE 8080
|
||||
|
||||
# Запускаем в optimized режиме
|
||||
ENTRYPOINT ["/opt/keycloak/bin/kc.sh", "start", "--optimized"]
|
||||
@@ -1,37 +0,0 @@
|
||||
# Database configuration - ИСПРАВЛЕННЫЙ ФОРМАТ
|
||||
db=postgres
|
||||
db-url=jdbc:postgresql://keycloak-db:5432/keycloak
|
||||
db-username=keycloak
|
||||
db-password=${KC_DB_PASSWORD}
|
||||
|
||||
# Admin credentials
|
||||
admin-username=${KEYCLOAK_ADMIN}
|
||||
admin-password=${KEYCLOAK_ADMIN_PASSWORD}
|
||||
|
||||
# HTTP configuration
|
||||
http-enabled=true
|
||||
http-port=8080
|
||||
http-relative-path=/auth
|
||||
|
||||
# Hostname configuration
|
||||
hostname=https://yalarba.ru
|
||||
hostname-path=/auth
|
||||
hostname-strict=true
|
||||
hostname-strict-https=true
|
||||
hostname-strict-backchannel=false
|
||||
|
||||
# Proxy configuration
|
||||
proxy=reencrypt
|
||||
proxy-address-forwarding=true
|
||||
|
||||
# Health checks
|
||||
health-enabled=true
|
||||
|
||||
# Features
|
||||
features=token-exchange,admin-fine-grained-authz
|
||||
|
||||
# Logging
|
||||
log-level=INFO
|
||||
|
||||
# Transaction recovery (для исправления предупреждения)
|
||||
transaction-xa-enabled=true
|
||||
@@ -1,112 +0,0 @@
|
||||
{
|
||||
"id": "master",
|
||||
"realm": "master",
|
||||
"displayName": "Yalarba & Begushiybashkir",
|
||||
"displayNameHtml": "<div class=\"kc-logo-text\"><span>Yalarba Auth</span></div>",
|
||||
"enabled": true,
|
||||
"sslRequired": "external",
|
||||
"registrationAllowed": false,
|
||||
"loginWithEmailAllowed": true,
|
||||
"duplicateEmailsAllowed": false,
|
||||
"resetPasswordAllowed": true,
|
||||
"editUsernameAllowed": false,
|
||||
"bruteForceProtected": true,
|
||||
"permanentLockout": false,
|
||||
"maxFailureWaitSeconds": 900,
|
||||
"minimumQuickLoginWaitSeconds": 60,
|
||||
"waitIncrementSeconds": 60,
|
||||
"quickLoginCheckMilliSeconds": 1000,
|
||||
"maxDeltaTimeSeconds": 43200,
|
||||
"failureFactor": 5,
|
||||
|
||||
"clients": [
|
||||
{
|
||||
"clientId": "yalarba-web",
|
||||
"name": "Yalarba.ru Web Application",
|
||||
"description": "Web application for yalarba.ru",
|
||||
"enabled": true,
|
||||
"protocol": "openid-connect",
|
||||
"publicClient": true,
|
||||
"standardFlowEnabled": true,
|
||||
"implicitFlowEnabled": false,
|
||||
"directAccessGrantsEnabled": false,
|
||||
"rootUrl": "https://yalarba.ru",
|
||||
"baseUrl": "https://yalarba.ru",
|
||||
"redirectUris": [
|
||||
"https://yalarba.ru/*",
|
||||
"https://www.yalarba.ru/*"
|
||||
],
|
||||
"webOrigins": [
|
||||
"https://yalarba.ru",
|
||||
"https://www.yalarba.ru"
|
||||
],
|
||||
"attributes": {
|
||||
"oauth2.device.authorization.grant.enabled": "false",
|
||||
"backchannel.logout.revoke.offline_tokens": "false"
|
||||
}
|
||||
},
|
||||
{
|
||||
"clientId": "begushiybashkir-web",
|
||||
"name": "Begushiybashkir.ru Web Application",
|
||||
"description": "Web application for begushiybashkir.ru",
|
||||
"enabled": true,
|
||||
"protocol": "openid-connect",
|
||||
"publicClient": true,
|
||||
"standardFlowEnabled": true,
|
||||
"implicitFlowEnabled": false,
|
||||
"directAccessGrantsEnabled": false,
|
||||
"rootUrl": "https://begushiybashkir.ru",
|
||||
"baseUrl": "https://begushiybashkir.ru",
|
||||
"redirectUris": [
|
||||
"https://begushiybashkir.ru/*",
|
||||
"https://www.begushiybashkir.ru/*"
|
||||
],
|
||||
"webOrigins": [
|
||||
"https://begushiybashkir.ru",
|
||||
"https://www.begushiybashkir.ru"
|
||||
],
|
||||
"attributes": {
|
||||
"oauth2.device.authorization.grant.enabled": "false",
|
||||
"backchannel.logout.revoke.offline_tokens": "false"
|
||||
}
|
||||
},
|
||||
{
|
||||
"clientId": "admin-cli",
|
||||
"name": "${client_admin-cli}",
|
||||
"enabled": true,
|
||||
"protocol": "openid-connect",
|
||||
"publicClient": false,
|
||||
"standardFlowEnabled": false,
|
||||
"implicitFlowEnabled": false,
|
||||
"directAccessGrantsEnabled": true,
|
||||
"serviceAccountsEnabled": true
|
||||
}
|
||||
],
|
||||
|
||||
"users": [
|
||||
{
|
||||
"username": "superadmin",
|
||||
"email": "admin@yalarba.ru",
|
||||
"firstName": "Super",
|
||||
"lastName": "Admin",
|
||||
"enabled": true,
|
||||
"emailVerified": true,
|
||||
"credentials": [
|
||||
{
|
||||
"type": "password",
|
||||
"value": "SuperAdmin123!",
|
||||
"temporary": false
|
||||
}
|
||||
],
|
||||
"realmRoles": [
|
||||
"admin",
|
||||
"default-role-master"
|
||||
],
|
||||
"clientRoles": {
|
||||
"realm-management": [
|
||||
"realm-admin"
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
Reference in New Issue
Block a user