Keycloak & Cloudron

[girish]

@Sam_uk mm, not really, it seems to have some compose files etc. I can't find pawel on this forum to tag but I am not even sure who created that repo and why it's in the cloudron namespace. But worth looking into.

[girish]

Strange there is no app request for keycloak. @Sam_uk do you think you can open an app request topic ?

[marcusquinn]

@girish Or move this one? It seems to have all the useful links in so far.

[Sam_uk]

@girish I'm tempted not to.

I think my position is that Authentik is the better app, which would provide everything that Keycloak does.

[girish]

@Sam_uk ah ok, I upvoted that one

[nj]

@girish Please check this out. I previously packaged Keycloak but suddenly the Keycloak team decided to deprecate the Wildfly version and started supporting Quarkus runtime. So I had to re-package it again. Took a while during the weekdays.

https://github.com/njsubedi/cloudron-keycloak

[Sam_uk]

@nj Great stuff, thanks I'll have a go at installing it sometime this week.

[girish]

@nj thanks! this is awesome, added to our list of packages to push out.

[Sam_uk]

@girish

Just to update https://github.com/njsubedi/cloudron-keycloak seems to be working well so far.

Configured Nextcloud, Humhub & Rocketchat to use it.

[marcusquinn]

@girish @nebulon Maybe it makes sense to consider making this an add-on app and option to enable for apps that can support it. Very valuable to us, and could look at helping with sponsorship if that motivates.

[nj]

Update available: Keycloak 7.0.1

[Sam_uk]

@nj I've run into an issue with using custom themes on Keycloak: https://github.com/njsubedi/cloudron-keycloak/issues/5

Does this seem to be specific to a Cloudron install? It works on a more conventional install for us.

Can anyone suggest how to troubleshoot or fix?

[timconsidine]

@nj awesome ! thank you !

I just installed it as a custom app. Looks great. BUT ...

I haven't a scoobies how to use it !
There's far too many words on their website, and far too many options in the app.

2 questions :

• the sync of Cloudron users does not seem to complete, although app says completed.
• how do I add an app to be protected by Keycloak ?

[nj]

Update available for Keycloak 18.0.0. Up and running without issues for a while.

https://github.com/njsubedi/cloudron-keycloak

[nj]

Update available v18.0.1

[nj]

Update available 18.0.2

[nj]

Update available v19.0.1

[jdaviescoates]

@staff we should get this in the app store, no?

[BrutalBirdie]

@nj && @jdaviescoates
I just tested the app but ended up with an error state.

# Clone the repo
git clone https://github.com/njsubedi/cloudron-keycloak.git; cd cloudron-keycloak

# build the app
cloudron build --set-repository dr.cloudron.dev/$(jq -r .id < CloudronManifest.json) --tag $(jq -r .version < CloudronManifest.json)

# Install the app
cloudron install -l keycloak.cloudron.dev

log:
https://paste.cloudron.dev/hemoxaroni.log

[nj]

@BrutalBirdie It seems the problem only occurs in new installation. Since I've always been updating from previous versions, the error didn't show up. I'm fixing it now; and will update you when done.

Issue: Starting v19.0, Keycloak would require kc.sh --optimized to start Keycloak. Otherwise it would try to run kc.sh build before starting. That resulted in failure in the readonly system.

Issue 2: I had set optionalSso=true but that lead to another issue where CLOUDRON_LDAP_URL variable would be unbound when installed from CLI. I don't think this was the default behaviour when I first packaged Cloudron. Anyway, I have set optionalSso=false just in case Cloudron's default changes again.

The package should build and install correctly. PS: I'll start testing on fresh installs from next releases, so it should not repeat again.

https://github.com/njsubedi/cloudron-keycloak/releases/tag/v19.0.1-patch2