FROM quay.io/keycloak/keycloak:23.0
WORKDIR /opt/keycloak
RUN ./bin/kc.sh build \
    --spi-x509cert-lookup-provider=nginx