Made keycloak partially init from env variables

also fixed theme to russian
This commit is contained in:
2026-04-23 19:59:25 +03:00
parent 112a728d0b
commit d48fa65f8e
9 changed files with 129 additions and 13 deletions

View File

@@ -0,0 +1,35 @@
realm: $(REALM_NAME)
enabled: true
displayName: $(REALM_DISPLAY_NAME)
loginTheme: Blue_stripes
attributes:
userProfileEnabled: true
registrationAllowed: true
registrationEmailAsUsername: false # Set to true if you want email as username
editUsernameAllowed: false # Prevent username changes after registration
internationalizationEnabled: true
defaultLocale: ru
supportedLocales:
- ru
userProfile:
attributes:
- name: "username"
displayName: ${username}
permissions:
view: ["admin", "user"]
edit: ["admin", "user"]
- name: "email"
displayName: ${email}
required:
roles: ["user"]
permissions:
view: ["admin", "user"]
edit: ["admin", "user"]
validations:
email: {}
unmanagedAttributePolicy: "ADMIN_VIEW"

View File

@@ -0,0 +1,22 @@
realm: $(REALM_NAME)
clients:
- clientId: $(FRONTEND_CLIENT_ID)
name: $(FRONTEND_CLIENT_NAME)
rootUrl: $(FRONTEND_URL)
enabled: true
publicClient: true
redirectUris:
- $(FRONTEND_REDIRECT_PATH)
webOrigins:
- $(FRONTEND_URL)
protocol: openid-connect
standardFlowEnabled: true
directAccessGrantsEnabled: true
attributes:
post.logout.redirect.uris: $(FRONTEND_HOME_URI)
- clientId: $(QUANTUM_BACKEND_CLIENT_ID)
enabled: true
name: $(QUANTUM_BACKEND_CLIENT_NAME)
secret: $(QUANTUM_BACKEND_CLIENT_SECRET)
serviceAccountsEnabled: true
publicClient: false

View File

@@ -0,0 +1,10 @@
realm: $(REALM_NAME)
users:
- username: service-account-$(QUANTUM_BACKEND_CLIENT_ID)
enabled: true
serviceAccountClientId: $(QUANTUM_BACKEND_CLIENT_ID)
clientRoles:
realm-management:
- view-users
- query-users