sebschlicht/keycloak-ldap-nextcloud-bootstrap-image

Docker image to bootstrap a Keycloak realm that makes LDAP users accessible to Nextcloud

keycloak-ldap-nextcloud-bootstrap-image's Issues

Generate and embed/configure X509 key/certificate

The current setup focuses on the bootstrapping of Keycloak. However, the ultimate goal is to allow a client to connect to Keycloak.
Achieving this goals requires to:

1. generate a X509 key pair for the client
2. pass the generated public key into Keycloak

It is not the goal to provide a programmatic addition of clients but the documentation should cover their full setup and the image should fully support the creation of a secure Nextcloud client.
Thus, the image must support to pass the public key to Keycloak, e.g. by offering the respective environment variable or by importing the key from a mounted volume.

Nextcloud provisioning

The ultimate goal is to provide a bootstrapper that enables users to employ a full provisioning of the whole pipeline, i.e. LDAP, Keycloak and Nextcloud.

The provisioning of LDAP and Keycloak has already been described and is manifested in examples.
The provisioning of Nextcloud, however, is not covered yet.

If bootstrapping the Nextcloud provisioning should be added, the image name has to be changed, as the bootstrapping would no longer be limited to Keycloak.

This should be tackled after somehow closing #1.

OIDC support

The following (questionable) article mentions OIDC:
https://www.comakeit.com/blog/quick-guide-using-keycloak-identity-access-management/

OIDC is actually preferred over SAML by Keycloak, being more recent and web-oriented.