feat: Build own keycloak container

Signed-off-by: Julius Knorr <jus@bitgrid.net>

Author: juliusknorr

.github/workflows/docker.yml

@@ -33,6 +33,7 @@ jobs:
           - saml
           - nginx
           - elasticsearch
+          - keycloak
           - mailhog
           - ldap
           - lookupserver

docker-compose.yml

@@ -954,18 +954,21 @@ services:
       NEXTCLOUD_URL: http://nextcloud
 
   keycloak:
-    image: quay.io/keycloak/keycloak:26.1
+    image: ghcr.io/juliusknorr/nextcloud-dev-keycloak:latest
     expose:
       - 8080
-    volumes:
-      - ./docker/configs/keycloak:/opt/keycloak/data/import
-    command: start-dev --import-realm
+    # volumes:
+      # - ./docker/configs/keycloak:/opt/keycloak/data/import
+    command: start-dev --import-realm --http-enabled=true --proxy-headers xforwarded
     environment:
+      PROTOCOL: "${PROTOCOL:-http}"
+      DOMAIN_SUFFIX: "${DOMAIN_SUFFIX:-.local}"
       VIRTUAL_HOST: "keycloak${DOMAIN_SUFFIX}"
       VIRTUAL_PORT: 8080
-      KEYCLOAK_ADMIN: admin
-      KEYCLOAK_ADMIN_PASSWORD: admin
-      PROXY_ADDRESS_FORWARDING: "true"
+      KC_BOOTSTRAP_ADMIN_USERNAME: admin
+      KC_BOOTSTRAP_ADMIN_PASSWORD: admin
+      KEYCLOAK_PROXY_ADDRESS_FORWARDING: "true"
+      KEYCLOAK_FRONTEND_URL: "${PROTOCOL:-http}://keycloak${DOMAIN_SUFFIX}"
       KC_PROXY: edge
 
   av:

docker/keycloak/Dockerfile

@@ -0,0 +1,9 @@
+FROM quay.io/keycloak/keycloak:26.1
+
+RUN mkdir -p /opt/keycloak/data/import
+
+ADD keycloak/Example-realm.json /opt/keycloak/data/import/Example-realm.json
+
+ADD keycloak/prepare.sh /opt/keycloak/bin/custom-kc.sh
+
+ENTRYPOINT ["/opt/keycloak/bin/custom-kc.sh"]

…cker/configs/keycloak/Example-realm.json docker/keycloak/Example-realm.jsondocker/configs/keycloak/Example-realm.json renamed to docker/keycloak/Example-realm.json docker/configs/keycloak/Example-realm.json renamed to docker/keycloak/Example-realm.json

@@ -690,7 +690,7 @@
   }, {
     "id" : "555c2809-b153-4cf4-8bb1-a6306e5179c7",
     "clientId" : "http://nextcloud.local/index.php/apps/user_saml/saml/metadata",
-    "adminUrl" : "http://keycloak.dev.local/auth/realms/Example",
+    "adminUrl" : "http://keycloak.local/auth/realms/Example",
     "surrogateAuthRequired" : false,
     "enabled" : true,
     "alwaysDisplayInConsole" : false,

docker/keycloak/prepare.sh

@@ -0,0 +1,26 @@
+#!/bin/bash
+
+KEYCLOAK_REALM_CONFIG="/opt/keycloak/data/import/Example-realm.json"
+PROTOCOL="${PROTOCOL:-http}"
+NEXTCLOUD_URL=${PROTOCOL}://${NEXTCLOUD_URL:-nextcloud}${DOMAIN_SUFFIX}
+KEYCLOAK_URL=${PROTOCOL}://${KEYCLOAK_URL:-keycloak}${DOMAIN_SUFFIX}
+
+if [ -f "$KEYCLOAK_REALM_CONFIG" ]; then
+    echo "Preparing Keycloak realm configuration..."
+
+    echo "Using NEXTCLOUD_URL: ${NEXTCLOUD_URL}"
+    echo "Using KEYCLOAK_URL: ${KEYCLOAK_URL}"
+
+    # Replace placeholder with actual NEXTCLOUD_URL
+    sed -i.bak "s|http://nextcloud\\.local|${NEXTCLOUD_URL//./\\.}|g" "$KEYCLOAK_REALM_CONFIG"
+    sed -i.bak "s|http://keycloak\\.local|${KEYCLOAK_URL//./\\.}|g" "$KEYCLOAK_REALM_CONFIG"
+    rm -f "${KEYCLOAK_REALM_CONFIG}.bak"
+
+    cat "$KEYCLOAK_REALM_CONFIG"
+
+    echo "Realm configuration prepared."
+else
+    echo "Realm configuration file not found: $KEYCLOAK_REALM_CONFIG"
+fi
+
+exec /opt/keycloak/bin/kc.sh "$@"