docker/swarm/stack/keycloak.yml

parameters:
  _param:
    docker_keycloak_server_replicas: 1
    docker_keycloak_proxy_replicas: 1
    docker_image_keycloak_server: jboss/keycloak:3.4.2.Final
    docker_image_keycloak_proxy: jboss/keycloak-proxy:3.4.2.Final
    keycloak_bind_port: ${_param:haproxy_keycloak_bind_port}
    keycloak_proxy_bind_port: ${_param:haproxy_keycloak_proxy_bind_port}
    # Initial admin support
    keycloak_admin_username: admin
    keycloak_admin_password: password
  docker:
    client:
      stack:
        keycloak:
          environment:
            KEYCLOAK_USER: ${_param:keycloak_admin_username}
            KEYCLOAK_PASSWORD: ${_param:keycloak_admin_password}
          service:
            keycloak-server:
              image: ${_param:docker_image_keycloak_server}
              deploy:
                replicas: ${_param:docker_keycloak_server_replicas}
                restart_policy:
                  condition: any
              ports:
                - ${_param:haproxy_keycloak_exposed_port}:${_param:keycloak_bind_port}
              volumes:
                - /srv/volumes/keycloak/server/:/app
            keycloak-proxy:
              image: ${_param:docker_image_keycloak_proxy}
              deploy:
                replicas: ${_param:docker_keycloak_proxy_replicas}
                restart_policy:
                  condition: any
              ports:
                - ${_param:haproxy_keycloak_proxy_exposed_port}:${_param:keycloak_proxy_bind_port}
              volumes:
                - /srv/volumes/keycloak/proxy/proxy.json:/opt/jboss/conf/proxy.json
          network:
            default:
              external:
                name: keycloak_backend