Sanitized single-commit public mirror of recipe-maintainer. - Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders. - Removed plans/ and planned-updates/ (deployment-planning docs) so no client/ deployment domains appear in the public repo. - All other secret stores were already gitignored. - docs.coopcloud.tech retained as a submodule (public upstream).
791 B
791 B
Keycloak — First-Time Setup
Prerequisites
- DNS:
keycloak.<domain_suffix>must resolve to the server
Steps
-
Create the app:
abra app new keycloak --server <SERVER> --domain keycloak.<DOMAIN_SUFFIX> --no-input -
Generate secrets:
abra app secret generate keycloak.<DOMAIN_SUFFIX> --all -m --no-inputSave output to
recipe-info/testsecrets/keycloak.<DOMAIN_SUFFIX>. -
Deploy:
abra app deploy keycloak.<DOMAIN_SUFFIX> --chaos --force --no-input -
Verify: curl
https://keycloak.<DOMAIN_SUFFIX>/realms/masterreturns HTTP 200.
Notes
- Keycloak health check uses
/realms/master(root/returns 302). - Admin credentials: username
admin, password fromadmin_passwordsecret.