docker-compose.yaml

version: '2'

services:
  downstream:
    image: nginx:alpine
    ports:
      - 8282:80
    network_mode: bridge

  echo:
    image: gcr.io/google_containers/echoserver:1.8
    ports:
      - 8383:8080
    network_mode: bridge

  proxy:
    build: .
    ports:
      - 80:80
    volumes:
      - ./bootstrap.sh:/usr/local/openresty/bootstrap.sh
    environment:
      - OID_SESSION_SECRET=623q4hR325t36VsCD3g567922IC0073T
      - OID_SESSION_CHECK_SSI=off
      - OID_SESSION_NAME=oidc_auth

      - OID_REDIRECT_PATH=/redirect_uri
      - OID_DISCOVERY=http://192.168.99.100:8080/auth/realms/master/.well-known/openid-configuration
      - OID_CLIENT_ID=proxy
      - OID_CLIENT_SECRET=dee59d02-b1a9-455a-bd3c-38d2e060bf0f
      - OID_USE_PKCE=true

      - PROXY_HOST=192.168.99.100
      - PROXY_PORT=8383
      - PROXY_PROTOCOL=http
    network_mode: bridge

  keycloak:
    image: jboss/keycloak
    ports:
      - 8080:8080
    environment:
    - KEYCLOAK_USER=admin
    - KEYCLOAK_PASSWORD=admin
    network_mode: bridge