{"repo":"heyvaldemar/keycloak-traefik-letsencrypt-docker-compose","free":true,"listed":false,"github":"https://github.com/heyvaldemar/keycloak-traefik-letsencrypt-docker-compose","clone":"git clone https://github.com/heyvaldemar/keycloak-traefik-letsencrypt-docker-compose.git","description":"Keycloak with Let's Encrypt Using Docker Compose","language":"Shell","stars":145,"topics":["containerization","containers","devops","docker","docker-compose","docker-container","docker-hub","docker-image","docker-registry","docker-volumes"],"license":"MIT","category":"deployment-docker-iac","readme_excerpt":"Keycloak + Traefik + Let's Encrypt — Docker Compose Contents - Why this stack? - Prerequisites - Getting started - Features - Typical use cases - Supply chain trust - Production checklist - Backups - Restoring a database backup - Testing - Security Notes - Container hardening - Standardization reference - About the maintainer This repository deploys Keycloak behind Traefik with automatic Let's Encrypt TLS , backed by PostgreSQL , with a scheduled backup container and a companion restore script . One docker compose up away from a production-shaped identity-and-access-management service at https://your-domain . 📙 Full narrative installation guide on the blog: heyvaldemar.com/install-keycloak-using-docker-compose/. Why this stack? Need This stack Manual install Keycloak Helm (K8s) Other compose examples ------ ----------- ---------------- --------------------- ------------------------ Ready to deploy in in .env.example . Compose pulls by digest, not by tag. Two users deploying this repo on different days get byte-identical image manifests regardless of upstream repushes. Dependabot's docker ecosystem watches each digest and opens a weekly PR when any of them changes. CI's Deployment Verification workflow runs on every push, pull request, and every Monday at 06:00 UTC — it stands up the full compose stack with ephemeral credentials, validates HTTPS routing + Traefik dashboard smoke, and tears down. Drift in upstream images surfaces within a week instead of on the next user deplo","default_branch":null,"files":null,"tree":[],"storefront":"/r/heyvaldemar","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/heyvaldemar/keycloak-traefik-letsencrypt-docker-compose/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}