keycloak

Deploy Keycloak identity and access management as a Podman quadlet.

giftpilz0.container20 variables

Usage

playbook.yml

- hosts: all
  roles:
    - role: giftpilz0.container.keycloak

Variables

• podman_userstr

  System user for rootless podman operations.

  Default{{ ansible_user }}
• keycloak_imagestr

  Image name without tag.

  Defaultquay.io/keycloak/keycloak
• keycloak_versionstr

  Container image version.

  Default26.8.1
• keycloak_autoupdatebool

  Enable podman auto-update for this container.

  Defaulttrue
• keycloak_network_enabledbool

  Create and manage the podman network.

  Defaulttrue
• keycloak_network_namestr

  Podman network name.

  Defaultkeycloak-internal
• keycloak_network_driverstr

  Podman network driver.

  Defaultbridge
• keycloak_port_map_enabledbool

  Expose container ports on the host.

  Defaulttrue
• keycloak_bind_ipstr

  Host IP to bind exposed ports to.

  Default127.0.0.1
• keycloak_port_maplist[str]

  Host:container port mappings.

  Default- 8080:8080
• keycloak_domainstr

  External domain for the Keycloak instance.

  Defaultlogin.nixpi.de
• keycloak_admin_passwordstr

  Admin bootstrap password.

  Default""
• keycloak_db_hoststr

  PostgreSQL container hostname.

  Defaultpostgresql-pod
• keycloak_db_namestr

  Database name.

  Defaultkeycloak
• keycloak_db_userstr

  Database user.

  Defaultkeycloak
• keycloak_db_passwordstr

  Database user password.

  Default""
• keycloak_environment_varsdict

  Extra environment variables injected into the container.

  Default

  KC_HTTPS_PORT: '8443'
  KC_HTTP_PORT: '8080'
  KC_HTTP_ENABLED: 'true'
  KC_HEALTH_ENABLED: 'true'
  KC_HTTP_MANAGEMENT_SCHEME: http
  KC_METRICS_ENABLED: 'true'
  KC_PROXY: edge
  KC_PROXY_HEADERS: xforwarded
  KC_PROXY_TRUSTED_ADDRESSES: 127.0.0.1,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
  KC_HOSTNAME: '{{ keycloak_domain }}'
  KC_DB: postgres
  KC_DB_URL: jdbc:postgresql://{{ keycloak_db_host }}:5432/{{ keycloak_db_name }}
  KC_DB_USERNAME: '{{ keycloak_db_user }}'
  KC_DB_PASSWORD: '{{ keycloak_db_password }}'
  KC_BOOTSTRAP_ADMIN_USERNAME: admin
  KC_BOOTSTRAP_ADMIN_PASSWORD: '{{ keycloak_admin_password }}'
  KC_CACHE: ispn
  KC_CACHE_CONFIG_FILE: cache-ispn.xml
  KC_CACHE_STACK: jdbc-ping
  KC_LOG: console
  KC_LOG_LEVEL: WARN
  KC_LOG_CONSOLE_COLOR: 'true'
  KC_FEATURES: scripts

• keycloak_entrypointstr

  Optional container entrypoint override.

  Default""
• keycloak_extra_fileslist[dict]

  Arbitrary file entries with src (controller path) or source (target path), dest, optional mount, mode, and template.

  Default[]
• keycloak_extra_dirslist[dict]

  Arbitrary directory entries with src (controller directory) or source (target path), dest, optional mount and mode.

  Default[]