What's installed on your Keycloak server?
- Keycloak 26.8 from the official image, running in production mode
- PostgreSQL 17 database, not exposed to the outside
- HTTPS through Caddy, on an sslip.io address based on your IP
- A temporary admin account with the login yonetici, which is Turkish for admin
- Firewall with only ports 22, 80 and 443 open
What size do you need for Keycloak?
Keycloak's official sizing guide gives 1250 MB of memory for one instance with 10,000 cached sessions. PostgreSQL and Caddy run on the same server, so 2 GB is a starting point, and 4 GB is a sensible rule of thumb for long-term use. For CPU, the official measure is 1 vCPU per 15 password logins each second, plus headroom for spikes. If it isn't enough, grow RAM, CPU and disk separately from your panel.
| Use | Size | Price | Choose |
|---|---|---|---|
| A few people | 2 GB RAM · 1 vCore · 40 GB NVMe | $4.01/mo | |
| Small team | 4 GB RAM · 2 vCore · 60 GB NVMe | $6.89/mo | |
| Company | 8 GB RAM · 4 vCore · 120 GB NVMe | $13.62/mo |
Who is it for?
- Teams that want one sign-in across several apps
- Developers adding OpenID Connect, OAuth 2.0 or SAML 2.0 login to their own app
- Anyone connecting existing LDAP or Active Directory users to their apps
- People who want to manage social login and two-factor sign-in in one place
What happens after you order?
- Set the size and complete your payment. Your server starts and Keycloak installs itself.
- In your panel, open your server from My servers. On the Overview tab, wait for the App row to say Keycloak is ready. The first start can take a little longer.
- Click Open app and sign in to the admin screen with the details from the Login and Password rows.
- Create a permanent admin and delete the temporary one.
- Create a new realm from the top left, then add a client for your application.
With every server
- Daily backups included in the price
- Unlimited traffic
- Full root access
- Scale RAM and CPU up or down later, and grow the disk
- Location: Istanbul · IST-1.
Good to know
- Don't use the master realm for your own apps. Keycloak's docs say to use it only to create and manage your other realms.
- Email isn't set up. For address checks and password resets, enter your SMTP server on each realm's Email tab.
- When you move to your own domain, also change SITE_URL in /opt/seturack/keycloak/.env and run docker compose up -d, because Keycloak reads its address from there.
- Updating Keycloak to new versions is your responsibility.
- Your panel shows two passwords: the first is for Keycloak, and the one under the Username row is for SSH.
Keycloak questions and answers
How much RAM does Keycloak need?
Keycloak's official guide gives about 1250 MB of memory for one instance. PostgreSQL and Caddy share the server, so start with 2 GB, and look at 4 GB for long-term use as a rule of thumb. You can scale the server up from your panel later.
How do I sign in to the Keycloak admin screen?
Click Open app in your panel, or open the link in the Admin address row. The Keycloak login is yonetici, which is Turkish for admin, and the password is in the Password row. No setup screen appears.
What does the temporary admin warning in Keycloak mean?
Keycloak treats its first admin account as temporary and shows a warning on the admin screen. To clear it, create a permanent admin and delete the temporary account by hand. The official docs say that account should exist only as long as it's needed.
Which protocols does Keycloak support?
Keycloak supports OpenID Connect, OAuth 2.0 and SAML 2.0, so most apps connect directly. It can also broker other OpenID Connect or SAML identity providers, and you can turn on social login.
Can Keycloak connect to LDAP or Active Directory?
Yes. With user federation, Keycloak connects to your existing LDAP or Active Directory directory, so you don't have to move your users.
Does Keycloak cost anything?
No license fee applies, because Keycloak is open source under Apache 2.0. You only pay the server's fixed monthly price, and nightly backups are included in that.