Self-host Keycloak (Postgres) with Docker

Keycloak backed by Postgres instead of its default embedded database, for a real multi-instance setup.

This page describes the Levelrail template for Keycloak (Postgres) (Security). It deploys the services below as one Docker Compose app on your own server.

Project site: https://www.keycloak.org/documentation.

Recommended memory: about 1024 MiB.

Services, ports and volumes

Service	Image	Container ports	Volumes
db	postgres:16-alpine	none	keycloak_postgres_db_data -> /var/lib/postgresql/data
keycloak	quay.io/keycloak/keycloak:26.1	8080	keycloak_postgres_data -> /opt/keycloak/data

Environment variables

Service	Variable	Value
db	POSTGRES_DB	Preset in the template
db	POSTGRES_PASSWORD	Generated at deploy
db	POSTGRES_USER	Preset in the template
keycloak	KC_BOOTSTRAP_ADMIN_PASSWORD	Generated at deploy
keycloak	KC_BOOTSTRAP_ADMIN_USERNAME	Generated at deploy
keycloak	KC_DB	Preset in the template
keycloak	KC_DB_PASSWORD	Generated at deploy
keycloak	KC_DB_URL	Preset in the template
keycloak	KC_DB_USERNAME	Preset in the template
keycloak	KC_HEALTH_ENABLED	Preset in the template
keycloak	KC_HOSTNAME	Preset in the template
keycloak	KC_HTTP_ENABLED	Preset in the template
keycloak	KC_LEGACY_OBSERVABILITY_INTERFACE	Preset in the template
keycloak	KC_PROXY_HEADERS	Preset in the template

Passwords and keys marked as generated are created for you when the app is deployed and stored as secrets. Values are not shown here.

Deploy Keycloak (Postgres) with Levelrail

In the dashboard, open Apps, choose New app, then Browse templates, and select Keycloak (Postgres). Review the Compose body and deploy.

With the CLI:

levelrail-cli templates deploy keycloak-postgres --name my-keycloak-postgres

See Service template catalog for how templates work, and Getting started if you have not installed Levelrail yet.

More Security templates

• 2FAuth
• authentik
• Cap
• Cryptgeon
• Infisical
• Keycloak

All templates are listed in the self-host gallery.