jiporCK/keycloak-production-setup ? reverse-engineered prompt

Build me a production ready Keycloak setup that runs with Docker Compose and sits behind Nginx, with PostgreSQL as the database and Cloudflare in front.

I want it so I can point a subdomain like auth.example.com at my server, have Nginx handle HTTPS with Cloudflare origin certs, and keep Keycloak internal only. Please make the setup easy to run with a single docker compose up -d, and include sensible default config files and an example env file I can copy and fill in. I also want the admin page to be reachable at /admin, and the whole thing should be set up the way Keycloak expects when it is behind a proxy.

If you need to check current Keycloak or Nginx settings, look up the latest docs online and make sure the config is suitable for production.