https-keycloak (docker-compose)

docker-compose.yaml

version: '3'

volumes:
  postgres_data:
      driver: local
  certs:

networks:
  backend:
    internal: true
    
services:
  https-portal:
    image: steveltn/https-portal:1.8.0    # If it need version up, you can change it.
    ports:
      - '80:80'
      - '443:443'
    networks: 
      - default
    links:
      - keycloak
    volumes:
      - certs:/var/lib/https-portal/sts.examle.com/production/
    restart: always
    environment:
      STAGE: 'production'
      DOMAINS: 'sts.examle.com -> http://keycloak:8080'
  kcdb:
    container_name: kcdb
    image: postgres:11.4 # depends on postgres-docker-gcs-backup
    restart: always
    networks: 
      - backend
    volumes:
      - postgres_data:/var/lib/postgresql/data
    environment:
      - POSTGRES_DB=keycloak
      - POSTGRES_USER=keycloak
      - POSTGRES_PASSWORD=${DB_PASSWORD}
  keycloak:
    container_name: keycloak
    build:
      context: .
      dockerfile: ./keycloak-amd64.Dockerfile
    networks: 
      - default
      - backend
    restart: always
    environment:
      - VIRTUAL_HOST=sts.examle.com
      - KEYCLOAK_USER=admin
      - KEYCLOAK_PASSWORD=password
      - PROXY_ADDRESS_FORWARDING=true
      - DB_VENDOR=POSTGRES
      - DB_ADDR=kcdb
      - DB_DATABASE=keycloak
      - DB_USER=keycloak
      - DB_PASSWORD=${DB_PASSWORD}
      - DB_SCHEMA=public
      - JDBC_PARAMS="ssl=true"
    depends_on:
      - kcdb