Keycloak Setup
Keycloak is optional — use it if you already have a Keycloak instance or want central SSO across multiple applications.
1. Create Client in Keycloak
- Go to your Keycloak Admin Console
- Select your realm
- Click Clients → Create
- Client ID:
rungu - Client authentication: On
- Valid redirect URIs:
https://your-domain.com/auth/keycloak/callback/* - Web origins:
https://your-domain.com
2. Get Credentials
After creation:
- Go to Clients → rungu → Credentials
- Copy the Client Secret
3. Configure Rungu
env
APP_URL=https://your-domain.com
KEYCLOAK_URL=https://auth.example.com # Keycloak base URL (no /auth)
KEYCLOAK_REALM=myorg # Your realm name
KEYCLOAK_CLIENT_ID=rungu
KEYCLOAK_CLIENT_SECRET=your-keycloak-secretRedirect URI
Default: {KEYCLOAK_URL}/realms/{KEYCLOAK_REALM} → callback at {APP_URL}/auth/keycloak/callback
You can override with KEYCLOAK_REDIRECT_URI env var.