Keycloak

Keycloak: Open-source identity and access management: SSO, OAuth2, OIDC and LDAP. Add centralized login to all your applications.

Deploy from this page: TryDirect provisions the server, starts the services, generates the deployment credentials and wires the 2 containers together. Nothing is shared between deployments and no secrets ship with the stack.

What's included

Service	Port	Description
app	8080 (public)	quay.io/keycloak/keycloak:latest
keycloak-db	internal	Database

What you configure

• Domain (commonDomain): the hostname the stack is served on
• Defaults provided: KC_DB, KC_DB_URL, KC_DB_USERNAME, POSTGRES_DB, POSTGRES_USER ship prefilled and can be adjusted in the deploy form

All 4 credentials (passwords and keys) are generated per deployment and stored in your project's secret store.

Requirements

• A cloud account connected to TryDirect (the deploy form provisions

the server) or one of your own servers

• A server that fits 2 containers (2 GB RAM or more recommended)
• A DNS record for the domain you set in the deploy form

Alternative: deploy with the Stacker CLI

Everything above also works from the command line:

git clone https://github.com/trydirect/awesome-selfhosted-stacker.git
cd awesome-selfhosted-stacker/stacker-projects/keycloak

# Generate secrets
cp .env.example .env
./scripts/generate-secrets.sh

# Deploy
stacker deploy