keycloak-explained.json

{
  "realm": "demo",
  "auth-server-url": "https://home.localdomain:8443/auth",
  "ssl-required": "external",
  "resource": "test", // this is client id
  "public-client": true,
  "truststore": "classpath:/keycloak.jks", //keycloak.jks is in src/main/resources/keycloak.jks
  "truststore-password": "secret",
  "client-keystore" : "/usr/demo/keycloakPub.jks", //keycloak.jks is on the server under /usr/demo/keycloak.jks
  "client-keystore-password" : "secret",
  "client-key-password" : "secret"
}