Keycloak Docker HTTPS required

by

Update Feb 2022:

Keycloak 17+ (e.g. quay.io/keycloak/keycloak:17.0.0) doesn’t support autogeneration of selfsigned cert. Minimal HTTPS working example for Keycloak 17+:

1.) Generate selfsigned domain cert/key (follow instructions on your terminal):

openssl req -newkey rsa:2048 -nodes \
  -keyout server.key.pem -x509 -days 3650 -out server.crt.pem

2.) Update permissions for the key

chmod 755 server.key.pem

3.) Start Keycloak (use volumes for cert/key):

docker run \
  --name keycloak \
  -e KEYCLOAK_ADMIN=admin \
  -e KEYCLOAK_ADMIN_PASSWORD=password \
  -e KC_HTTPS_CERTIFICATE_FILE=/opt/keycloak/conf/server.crt.pem \
  -e KC_HTTPS_CERTIFICATE_KEY_FILE=/opt/keycloak/conf/server.key.pem \
  -v $PWD/server.crt.pem:/opt/keycloak/conf/server.crt.pem \
  -v $PWD/server.key.pem:/opt/keycloak/conf/server.key.pem \
  -p 8443:8443 \
  quay.io/keycloak/keycloak:17.0.0 \
  start-dev

Keycloak will be exposed on port 8443 with HTTPS protocol with this setup. If you use also proxy (e.g. nginx) you will need to configure also env variable KC_PROXY properly (e.g. KC_PROXY=edge). Of course you can use also keycloak.conf file instead of env variables.

Old answer for Keycloak up to 16.1.1 and Keycloak legacy 17+:

Publish port 8443 (HTTPS) and use it instead of 8080 (HTTP):

docker run \
  --name keycloak \
  -e KEYCLOAK_USER=myadmin \
  -e KEYCLOAK_PASSWORD=mypassword \
  -p 8443:8443 \
  jboss/keycloak

Keycloak generates self signed cert for https in this setup. Of course, this is not a production setup.

Update

Use volumes for own TLS certificate:

  -v /<path>/tls.crt:/etc/x509/https/tls.crt \
  -v /<path>/tls.key:/etc/x509/https/tls.key \

More Related Contents:

  1. How to access host port from docker container [duplicate]
  2. How to get the IP address of the docker host from inside a docker container [duplicate]
  3. Where are Docker images stored on the host machine?
  4. How do I get into a Docker container’s shell?
  5. Using Docker-Compose, how to execute multiple commands
  6. How can I keep a container running on Kubernetes?
  7. Permission denied on accessing host directory in Docker
  8. Multiple FROMs – what it means
  9. What is the difference between a Docker image and a container?
  10. What does –net=host option in Docker command really do?
  11. Docker : Can a container A call an executable located on an other container B?
  12. accessing a docker container from another container
  13. Docker command fails during build, but succeeds while executed within running container
  14. How do you attach and detach from Docker’s process?
  15. How to use sudo inside a docker container?
  16. Docker – Name is already in use by container
  17. Airflow: how to get pip packages installed via their docker-compose.yml?
  18. Expose multiple api uri on the same nginx server block
  19. Docker, what is it and what is the purpose
  20. How do I mount a host directory as a volume in docker compose
  21. COPY with docker but with exclusion
  22. ARG or ENV, which one to use in this case?
  23. Why the “none” image appears in Docker and how can we avoid it
  24. Get container ID from Docker buildkit for interactive debugging
  25. How to execute command from one docker container to another
  26. How to specify different .dockerignore files for different builds in the same project?
  27. Is there a maximum number of containers running on a Docker host?
  28. Differences Between Dockerfile Instructions in Shell and Exec Form
  29. Can I specify host directory to mount from Dockerfile
  30. What is meant by shared kernel in Docker?

Leave a Comment