Day 1: What is Keycloak? Anatomy, Quarkus Runtime & First Realm

โครงสร้างแยก PostgreSQL Database พร้อม Persistent Volume Mount, Healthcheck, และการเปิด Health Endpoints

version: '3.8'

services:
  postgres:
    image: postgres:16-alpine
    container_name: keycloak-postgres
    environment:
      POSTGRES_DB: keycloak_db
      POSTGRES_USER: kc_db_user
      POSTGRES_PASSWORD: DB_Secret_SecurePassword_2026!
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
      - kc-network
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U kc_db_user -d keycloak_db"]
      interval: 5s
      timeout: 5s
      retries: 5

  keycloak:
    image: quay.io/keycloak/keycloak:24.0.5
    container_name: keycloak-core
    command: start-dev
    environment:
      KC_DB: postgres
      KC_DB_URL: jdbc:postgresql://postgres:5432/keycloak_db
      KC_DB_USERNAME: kc_db_user
      KC_DB_PASSWORD: DB_Secret_SecurePassword_2026!
      KC_DB_POOL_MIN_SIZE: 10
      KC_DB_POOL_MAX_SIZE: 30
      KEYCLOAK_ADMIN: superadmin
      KEYCLOAK_ADMIN_PASSWORD: AdminSuperSecret2026!
      KC_HEALTH_ENABLED: "true"
      KC_METRICS_ENABLED: "true"
      KC_HTTP_ENABLED: "true"
    ports:
      - "8080:8080"
      - "9000:9000"
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - kc-network

volumes:
  postgres_data:
    driver: local

networks:
  kc-network:
    driver: bridge