pooneyy
/
1Panel-Appstore
mirror of https://github.com/pooneyy/1Panel-Appstore
1
0
Fork 0
Code

feat(keycloak): add keycloak application with version 26.5.2

This commit is contained in:
pooneyy 2026-02-01 13:47:30 +08:00
parent 12574eeb27
commit c73c1d8507
No known key found for this signature in database
6 changed files with 283 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

172
apps/keycloak/26.5.2/data.yml Normal file
View File

@ -0,0 +1,172 @@
additionalProperties:
formFields:
- default: 8080
envKey: PANEL_APP_PORT_HTTP
labelZh: HTTP 端口
labelEn: HTTP Port
label:
zh: HTTP 端口
zh-Hant: HTTP 連接埠
en: HTTP Port
ja: HTTP ポート
ko: HTTP 포트
ms: Port HTTP
pt-br: Porta HTTP
ru: HTTP Порт
tr: HTTP Portu
description:
zh: "设置应用的 HTTP 访问端口，有效范围: 1-65535"
zh-Hant: "設定應用程式的 HTTP 存取連接埠，有效範圍: 1-65535"
en: "Set the HTTP access port for the application, valid range: 1-65535"
ja: "アプリケーションのHTTPアクセスポートを設定します。有効範囲: 1-65535"
ko: "애플리케이션의 HTTP 접근 포트를 설정합니다. 유효 범위: 1-65535"
ms: "Tetapkan port akses HTTP untuk aplikasi, julat sah: 1-65535"
pt-br: "Defina a porta de acesso HTTP para o aplicativo, intervalo válido: 1-65535"
ru: "Установите порт доступа HTTP для приложения, допустимый диапазон: 1-65535"
tr: "Uygulama için HTTP erişim portunu ayarlayın, geçerli aralık: 1-65535"
required: true
type: number
edit: true
rule: paramPort
- default: ""
envKey: KC_HOSTNAME
labelZh: 计划为 Keycloak 分配的域名
labelEn: Domain name planned for Keycloak
label:
zh: 计划为 Keycloak 分配的域名
zh-Hant: 計劃為 Keycloak 分配的網域名稱
en: Domain name planned for Keycloak
ja: Keycloak に計画されているドメイン名
ko: Keycloak에 계획된 도메인 이름
ms: Nama domain yang dirancang untuk Keycloak
pt-br: Nome de domínio planejado para o Keycloak
ru: Запланированное доменное имя для Keycloak
tr: Keycloak için planlanan alan adı
description:
zh: "keycloak 的生产环境不支持通过 http 访问。\n本应用安装向导仅支持通过反向代理配置SSL来访问 keycloak，因此你必须填写你计划为 keycloak 分配的域名。"
zh-Hant: "keycloak 的生產環境不支援透過 http 存取。\n本應用安裝精靈僅支援透過反向代理設定SSL來存取 keycloak，因此你必須填寫你計劃為 keycloak 分配的網域名稱。"
en: "The production environment of keycloak does not support access via HTTP.\nThis application installation wizard only supports accessing keycloak by configuring SSL through a reverse proxy. Therefore, you must fill in the domain name you plan to assign to keycloak."
ja: "keycloakの本番環境は、httpを介したアクセスをサポートしていません。\nこのアプリケーションインストールウィザードは、リバースプロキシを介したSSL設定によるkeycloakへのアクセスのみをサポートしています。そのため、keycloakに割り当てる予定のドメイン名を入力する必要があります。"
ko: "keycloak의 프로덕션 환경은 http를 통한 접근을 지원하지 않습니다.\n이 애플리케이션 설치 마법사는 리버스 프록시를 통한 SSL 구성으로 keycloak에 접근하는 것만 지원합니다. 따라서 keycloak에 할당할 도메인 이름을 입력해야 합니다."
ms: "Persekitaran pengeluaran keycloak tidak menyokong akses melalui HTTP.\nPembina pemasangan aplikasi ini hanya menyokong akses ke keycloak dengan mengkonfigurasi SSL melalui proksi terbalik. Oleh itu, anda mesti mengisi nama domain yang anda rancang untuk tugaskan kepada keycloak."
pt-br: "O ambiente de produção do keycloak não suporta acesso via HTTP.\nEste assistente de instalação do aplicativo suporta apenas o acesso ao keycloak configurando SSL por meio de um proxy reverso. Portanto, você deve preencher o nome de domínio que planeja atribuir ao keycloak."
ru: "Рабочая среда keycloak не поддерживает доступ по HTTP.\nМастер установки этого приложения поддерживает доступ к keycloak только путем настройки SSL через обратный прокси. Следовательно, вы должны указать доменное имя, которое планируете назначить для keycloak."
tr: "keycloak'ın üretim ortamı HTTP üzerinden erişimi desteklemez.\nBu uygulama kurulum sihirbazı, yalnızca bir ters proxy aracılığıyla SSL yapılandırarak keycloak'a erişimi destekler. Bu nedenle, keycloak'a atamayı planladığınız alan adını doldurmalısınız."
required: true
type: text
edit: true
- default: mariadb
envKey: PANEL_DB_TYPE
labelZh: 数据库
labelEn: Database
label:
zh: 数据库
zh-Hant: 資料庫
en: Database
ja: データベース
ko: 데이터베이스
ms: Pangkalan Data
pt-br: Banco de Dados
ru: База данных
tr: Veritabanı
required: true
type: apps
edit: true
values:
- label: MariaDB
value: mariadb
- label: MySQL
value: mysql
- label: PostgreSQL
value: postgres
child:
default: ""
envKey: PANEL_DB_HOST
required: true
type: service
- default: keycloak_user
envKey: PANEL_DB_USER
labelZh: 数据库用户名
labelEn: Database Username
label:
zh: 数据库用户名
zh-Hant: 資料庫使用者名稱
en: Database Username
ja: データベースユーザー名
ko: 데이터베이스 사용자 이름
ms: Nama Pengguna Pangkalan Data
pt-br: Nome de Usuário do Banco de Dados
ru: Имя пользователя базы данных
tr: Veritabanı Kullanıcı Adı
required: true
type: text
edit: true
rule: paramCommon
random: true
- default: keycloak_pass
envKey: PANEL_DB_USER_PASSWORD
labelZh: 数据库密码
labelEn: Database Password
label:
zh: 数据库密码
zh-Hant: 資料庫密碼
en: Database Password
ja: データベースパスワード
ko: 데이터베이스 비밀번호
ms: Kata Laluan Pangkalan Data
pt-br: Senha do Banco de Dados
ru: Пароль базы данных
tr: Veritabanı Parolası
required: true
type: password
edit: true
rule: paramComplexity
random: true
- default: keycloak
envKey: PANEL_DB_NAME
labelZh: 数据库名
labelEn: Database Name
label:
zh: 数据库名
zh-Hant: 資料庫名稱
en: Database Name
ja: データベース名
ko: 데이터베이스 이름
ms: Nama Pangkalan Data
pt-br: Nome do Banco de Dados
ru: Имя базы данных
tr: Veritabanı Adı
required: true
type: text
edit: true
rule: paramCommon
random: true
- default: Keycloak_admin_default
envKey: ADMIN_PASSWORD
labelZh: 默认管理员账户密码
labelEn: Default Administrator Account Password
label:
zh: 默认管理员账户密码
zh-Hant: 預設管理員帳戶密碼
en: Default Administrator Account Password
ja: デフォルト管理者アカウントパスワード
ko: 기본 관리자 계정 비밀번호
ms: Kata Laluan Akaun Pentadbir Lalai
pt-br: Senha Padrão da Conta de Administrador
ru: Пароль учётной записи администратора по умолчанию
tr: Varsayılan Yönetici Hesap Parolası
description:
zh: 此用户为临时管理员用户。为加强安全性，请创建一个永久管理员账户并删除此临时账户。
zh-Hant: 此使用者為臨時管理員使用者。為加強安全性，請建立一個永久管理員帳戶並刪除此臨時帳戶。
en: This user is a temporary administrator user. To harden security, create a permanent admin account and delete the temporary one.
ja: このユーザーは一時的な管理者ユーザーです。セキュリティを強化するには、恒久的管理者アカウントを作成し、一時的なアカウントを削除してください。
ko: 이 사용자는 임시 관리자 사용자입니다. 보안을 강화하려면 영구 관리자 계정을 생성하고 임시 계정을 삭제하십시오.
ms: Pengguna ini adalah pengguna pentadbir sementara. Untuk mengukuhkan keselamatan, buat akaun admin kekal dan padamkan akaun sementara tersebut.
pt-br: Este usuário é um usuário administrador temporário. Para reforçar a segurança, crie uma conta administrativa permanente e exclua a conta temporária.
ru: Этот пользователь является временным администратором. Для усиления безопасности создайте постоянную учётную запись администратора и удалите временную.
tr: Bu kullanıcı geçici bir yönetici kullanıcıdır. Güvenliği artırmak için kalıcı bir yönetici hesabı oluşturun ve geçici olanı silin.
required: false
type: text
disabled: true
rule: paramComplexity
random: true

26
apps/keycloak/26.5.2/docker-compose.yml Normal file
View File

@ -0,0 +1,26 @@
services:
keycloak:
image: keycloak/keycloak:26.5.2
environment:
- KC_BOOTSTRAP_ADMIN_PASSWORD=${ADMIN_PASSWORD}
- KC_BOOTSTRAP_ADMIN_USERNAME=admin
- KC_DB=${PANEL_DB_TYPE}
- KC_DB_USERNAME=${PANEL_DB_USER}
- KC_DB_PASSWORD=${PANEL_DB_USER_PASSWORD}
- KC_DB_URL_HOST=${PANEL_DB_HOST}
- KC_DB_URL_PORT=${PANEL_DB_PORT}
- KC_DB_URL_DATABASE=${PANEL_DB_NAME}
- KC_HOSTNAME=${KC_HOSTNAME}
- KC_HTTP_ENABLED=true
- KC_PROXY_HEADERS=xforwarded
ports:
- ${PANEL_APP_PORT_HTTP}:8080
command: start
networks:
- 1panel-network
labels:
createdBy: Apps
container_name: ${CONTAINER_NAME}
networks:
1panel-network:
external: true

27
apps/keycloak/README.md Normal file
View File

@ -0,0 +1,27 @@
## 默认账户密码
用户名: `admin`
密码: 前往应用商店，在应用的参数配置中获取
## 配置和使用说明
- admin 是临时管理员账户，首次登录后请新建一个账户，**并为其分配管理员角色**，再将 admin 账户删除。
1. 左侧栏找到 Users, Add Users 创建一个账户
2. 选择 Credentials 页签为账户设置密码
3. 选择 Role mapping 页签，点击 Assign role，选择 Realm roles
4. 勾选 admin (role_admin) 后 Assign
5. 删除 admin 账户
- Keycloak 支持 i18n，但需要手动启用
- 左侧栏找到 Realm settings, 选择 Localization 页签，启用 Internationalization 后选择你的支持区域
## 产品介绍
Keycloak 是一个开源的 **身份和访问管理 (IAM)** 平台，专为现代应用程序和服务设计。它的核心目标是简化应用程序的身份验证和授权流程，使开发者无需自行处理用户存储、认证逻辑等复杂的安全问题。
## 主要功能
- **标准化身份协议支持**: 原生支持 OpenID Connect、OAuth 2.0 和 SAML 等主流身份协议，使应用程序能够轻松集成单点登录 (SSO) 和社会化登录 (如 Google、GitHub 等) 。
- **用户联邦与集中管理**: 允许从外部用户存储 (如 LDAP、Active Directory、Kerberos) 同步用户，并提供统一的用户管理界面，简化用户生命周期管理 (创建、更新、删除、角色分配) 。
- **细粒度授权与访问控制**: 提供基于角色 (RBAC) 和属性 (ABAC) 的精细化授权策略，支持动态权限管理和策略决策，确保应用程序和服务的安全访问。
- **强身份验证机制**: 内置多因素认证 (MFA) 、条件访问、密码策略和身份验证流程定制，增强账户安全性，满足合规性要求。

26
apps/keycloak/README_en.md Normal file
View File

@ -0,0 +1,26 @@
## Default Credentials
username: `admin`
password: Go to the App Store and get it from the app's parameter settings
## Configuration and Usage Instructions
- **admin** is a temporary administrator account. After the initial login, please create a new account, **assign it the administrator role**, and then delete the **admin** account.
1. Find **Users** in the left sidebar, click **Add Users** to create an account.
2. Click on the new account to enter **User details**, select the **Role mapping** tab, click **Assign role**, and choose **Realm roles**.
3. Check the box for **admin (role_admin)** and click **Assign**.
4. Delete the **admin** account.
- Keycloak supports i18n, but it needs to be enabled manually.
- Find **Realm settings** in the left sidebar, select the **Localization** tab, enable **Internationalization**, and then select your supported locale(s).
## Introduction
Keycloak is an open-source **Identity and Access Management (IAM)** platform designed for modern applications and services. Its core objective is to simplify the authentication and authorization processes for applications, freeing developers from the complexities of handling user storage, authentication logic, and other intricate security concerns.
## Features
- **Support for Standardized Identity Protocols**: Natively supports mainstream identity protocols such as OpenID Connect, OAuth 2.0, and SAML, enabling applications to easily integrate Single Sign-On (SSO) and social logins (e.g., Google, GitHub).
- **User Federation and Centralized Management**: Allows synchronization of users from external user stores (e.g., LDAP, Active Directory, Kerberos) and provides a unified user management interface, simplifying user lifecycle management (creation, update, deletion, role assignment).
- **Fine-Grained Authorization and Access Control**: Offers detailed authorization policies based on roles (RBAC) and attributes (ABAC), supports dynamic permission management and policy decision-making, ensuring secure access to applications and services.
- **Strong Authentication Mechanisms**: Built-in Multi-Factor Authentication (MFA), conditional access, password policies, and customizable authentication flows enhance account security and meet compliance requirements.

32
apps/keycloak/data.yml Normal file
View File

@ -0,0 +1,32 @@
name: Keycloak
tags:
- 实用工具
title: 面向现代应用与服务的开源身份和访问管理器
description: 面向现代应用与服务的开源身份和访问管理器
additionalProperties:
key: keycloak
name: Keycloak
tags:
- Tool
shortDescZh: 面向现代应用与服务的开源身份和访问管理器
shortDescEn: Open Source Identity and Access Management For Modern Applications and Services
description:
en: Open Source Identity and Access Management For Modern Applications and Services
zh: 面向现代应用与服务的开源身份和访问管理器
zh-Hant: 面向現代應用與服務的開源身份和存取管理器
ja: モダンなアプリケーションとサービスのためのオープンソースのアイデンティティおよびアクセス管理
ms: Pengurusan Identiti dan Akses Sumber Terbuka Untuk Aplikasi dan Perkhidmatan Moden
pt-br: Gerenciamento de Identidade e Acesso de Código Aberto Para Aplicações e Serviços Modernos
ru: Управление идентификацией и доступом с открытым исходным кодом для современных приложений и сервисов
ko: 현대 애플리케이션 및 서비스를 위한 오픈 소스 신원 및 액세스 관리
type: website
crossVersionUpdate: true
limit: 0
website: https://www.keycloak.org
github: https://github.com/keycloak/keycloak
document: https://www.keycloak.org/getting-started/getting-started-docker
memoryRequired: 1536
architectures:
- amd64
- arm64
- ppc64le

BIN
apps/keycloak/logo.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 4.3 KiB