add traefik integration

.env.sample.

 COMPOSE_FILE=docker-compose.yml:ports.yml
 
+NAME=keycloak
+HOST=keycloak.xema.tetras-libre.fr
+
 # KeyCloak
 KC_ADMIN=admin
 KC_ADMIN_PASSWD=admin

docker-compose.yml

@@ -4,9 +4,10 @@ services:
     keycloak:
         image : quay.io/keycloak/keycloak:24.0.3
         container_name: keycloak
-        ports:
-            - 9090:8080
         environment:
-            - KEYCLOAK_ADMIN=admin
-            - KEYCLOAK_ADMIN_PASSWORD=admin
-        command: ["start-dev", "--import-realm"]
+            - KEYCLOAK_ADMIN=${KC_ADMIN}
+            - KEYCLOAK_ADMIN_PASSWORD=${KC_ADMIN_PASSWD}
+              # cf https://github.com/keycloak/keycloak/issues/11170 for below variable
+            - KC_HOSTNAME_URL=https://${HOST}
+            - KC_HOSTNAME_ADMIN_URL=https://${HOST}
+        command: ["start-dev", "--import-realm", "--verbose"]

traefik.yml

+version: "3"
+
+services:
+  keycloak:
+    networks:
+      - default
+      - traefik
+    expose:
+      - 8080
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=traefik"
+      - "traefik.http.routers.${NAME}.rule=Host(`${HOST}`)"
+      - "traefik.http.routers.${NAME}.tls.certresolver=myresolver"
+      - "traefik.http.routers.${NAME}.entrypoints=web,websecure"
+      - "traefik.http.routers.${NAME}.middlewares=hardening@docker"
+
+
+networks:
+  traefik:
+    external: true