#36 for Keycloak

homelab/server/config/keycloak/.env

@@ -1,10 +0,0 @@
-KEYCLOAK_ADMIN="jafner"
-KEYCLOAK_ADMIN_PASSWORD="iEKfrgdTLfbdqtMkH&FMrL3#t8^qfy%eSY5G94tfnUdQB3G!%CUaoFJuhCUN"
-KEYCLOAK_DATA="/home/joey/data/keycloak/data"
-
-SECRET="***REMOVED***"
-ENCRYPTION_KEY="72883626635979678254688349258592"
-PROVIDER_URI="https://keycloak.jafner.net/realms/Jafner.net"
-CLIENT_ID="traefik-forward-auth"
-CLIENT_SECRET="***REMOVED***"
-LOG_LEVEL="debug"

homelab/server/config/keycloak/docker-compose.yml

@@ -20,9 +20,9 @@ services:
           - keycloak
     restart: "no"
     command: start-dev --hostname-url=https://keycloak.jafner.net --proxy=passthrough
-    environment:
-      - KEYCLOAK_ADMIN=$KEYCLOAK_ADMIN
-      - KEYCLOAK_ADMIN_PASSWORD=$KEYCLOAK_ADMIN_PASSWORD
+    env_file:
+      - keycloak.env
+      - keycloak_secrets.env
     labels:
       traefik.http.routers.keycloak.rule: Host(`keycloak.jafner.net`)
       traefik.http.routers.keycloak.tls.certresolver: lets-encrypt
@@ -45,13 +45,9 @@ services:
         aliases:
           - forwardauth
     restart: "no"
-    environment:
-      - SECRET=$SECRET
-      - ENCRYPTION_KEY=$ENCRYPTION_KEY
-      - PROVIDER_URI=$PROVIDER_URI
-      - CLIENT_ID=$CLIENT_ID
-      - CLIENT_SECRET=$CLIENT_SECRET
-      - LOG_LEVEL=$LOG_LEVEL
+    env_file:
+      - forwardauth.env
+      - forwardauth_secrets.env
     labels:
       #- "traefik.enable=true"
       #- "traefik.docker.network=web"

homelab/server/config/keycloak/forwardauth.env

@@ -0,0 +1,3 @@
+PROVIDER_URI="https://keycloak.jafner.net/realms/Jafner.net"
+CLIENT_ID="traefik-forward-auth"
+LOG_LEVEL="debug"

homelab/server/config/keycloak/forwardauth_secrets.env

@@ -0,0 +1,3 @@
+CLIENT_SECRET="***REMOVED***"
+SECRET="***REMOVED***"
+ENCRYPTION_KEY="72883626635979678254688349258592"

homelab/server/config/keycloak/keycloak.env

@@ -0,0 +1,5 @@
+# Volumes
+KEYCLOAK_DATA="/home/joey/data/keycloak/data"
+
+# Env
+KEYCLOAK_ADMIN="jafner"

homelab/server/config/keycloak/keycloak_secrets.env

@@ -0,0 +1 @@
+KEYCLOAK_ADMIN_PASSWORD="iEKfrgdTLfbdqtMkH&FMrL3#t8^qfy%eSY5G94tfnUdQB3G!%CUaoFJuhCUN"