damiannolan / auth-proxy Goto Github PK

Using the docker-compose setup provided, create a new realm and sample auth client to use for testing.

Keycloak allows exporting of realms and auth clients to JSON. Export the realm and client and check them in under the config dir.

From a security standpoint it is preferred to run the app binary as non root user inside the container.

A user group and associated user should be added in the Dockerfile.

https://medium.com/better-programming/running-a-container-with-a-non-root-user-e35830d1f42a

The app binary is currently copied from build-env image to /usr/local/bin/, from file structure point of view this should probably be copied to a more appropriate directory.
For example:

• $HOME/bin
• /opt/app/

Essentially the title.

Some initial documentation would be nice.
Eg:

• Sample Makefile usage