Deployment WeCaRe HAPI FHIR Keycloak OAuth 2.0

Getting started HAPI FHIR

https://github.com/hapifhir/hapi-fhir-jpaserver-starter?ref=rob-ferguson

Ideas and base from HAPI FHIR AU from Rob Ferguson

Starting point getting started and + OAuth Part 1

Github:

• https://github.com/Robinyo/hapi-fhir-jpaserver-starter

• https://github.com/Robinyo/hapi-fhir-au/

• Rob Ferguson's blog: Getting Started with HAPI FHIR

• Rob Ferguson's blog: HAPI FHIR and FHIR Implementation Guides

• Rob Ferguson's blog: HAPI FHIR and AU Core Test Data

Docker Deployment

Parts:

• nginx
• redis
• hapi-fhir
• postgres
• keycloak
• oauth2-proxy

build using Dockerfiles in services/<part>/Dockerfile

keycloak

Development realm data will be imported on startup from in development-realm.json. To export realm changes:

docker compose stop
docker compose -f docker-compose-keycloak-realm-export.yml up -d
docker compose -f docker-compose-keycloak-realm-export.yml stop
docker compose -f docker-compose-keycloak-realm-export.yml down
docker compose up -d

Adapting for WeCaRe

/.env contains specific configurations

Do update password and secrets.

To update the OAuth CLIENT_SECRET you have to generate a new Client Secret in the oauth2-proxy Client in the hapi-fhir-dev realm:

To update the URLs consider: development-realm.json

SSL Certificates

For development mkcert

For prod Let's Encrypt

Customization

Customization for the web interface of the hapi server comes from custom-hapi-theme/. The "wecare" keycloak theme comes from custom-keycloak-theme/ it's a adapted copy of the "keycloak v2" theme with the WeCaRe logo in it.