Dockerfile

FROM quay.io/keycloak/keycloak:23.0 as builder

COPY --chown=keycloak:keycloak config/providers /opt/keycloak/providers/

WORKDIR /opt/keycloak

# For demonstration purposes only, please make sure to use proper certificates in production instead
RUN keytool -genkeypair -storepass password -storetype PKCS12 -keyalg RSA -keysize 2048 -dname "CN=server" -alias server -ext "SAN:c=DNS:localhost,IP:127.0.0.1" -keystore conf/server.keystore
RUN /opt/keycloak/bin/kc.sh build

FROM quay.io/keycloak/keycloak:23.0
COPY --from=builder /opt/keycloak/ /opt/keycloak/

# Enable health and metrics support
ENV KC_HEALTH_ENABLED=true
ENV KC_METRICS_ENABLED=true
COPY ./config/healthcheck/healthcheck.sh /opt/keycloak/conf/healthcheck.sh

# Uncomment this line to install custom themes (it should point to the right directory)
# COPY config/themes/custom /opt/keycloak/themes/custom

COPY ./config/infinispan/cache-ispn-jdbc-ping.xml /opt/keycloak/conf/cache-ispn-jdbc-ping.xml
ENV KC_CACHE_CONFIG_FILE=cache-ispn-jdbc-ping.xml

ENTRYPOINT ["/opt/keycloak/bin/kc.sh"]