docker/swarm/stack/keycloak.yml

parameters:
  _param:
    docker_keycloak_server_replicas: 1
    docker_keycloak_proxy_replicas: 1
    keycloak_bind_port: 8080
    keycloak_proxy_bind_port: 9990
    # Initial admin support
    keycloak_admin_username: admin
  docker:
    client:
      stack:
        keycloak:
          environment:
            KEYCLOAK_USER: ${_param:keycloak_admin_username}
            KEYCLOAK_PASSWORD: ${_param:keycloak_admin_password}
            KEYCLOAK_IMPORT: "/app/realms.json"
          service:
            keycloak-server:
              image: ${_param:docker_image_keycloak_server}
              deploy:
                replicas: ${_param:docker_keycloak_server_replicas}
                restart_policy:
                  condition: any
              ports:
                - ${_param:haproxy_keycloak_exposed_port}:${_param:keycloak_bind_port}
              volumes:
                - /srv/volumes/keycloak/server/:/app
            keycloak-proxy:
              image: ${_param:docker_image_keycloak_proxy}
              deploy:
                replicas: ${_param:docker_keycloak_proxy_replicas}
                restart_policy:
                  condition: any
              ports:
                - ${_param:haproxy_keycloak_proxy_exposed_port}:${_param:keycloak_proxy_bind_port}
              volumes:
                - /srv/volumes/keycloak/proxy:/opt/jboss/conf
          network:
            default:
              external:
                name: keycloak_backend