Technical Documentation
Overview
This section contains technical documentation for the Friendly Tech UI Backend: system composition, deployment options, configuration, health checks, and developer guides.
Installation & Deployment
| Page | Description |
|---|---|
Architecture, required services and their roles |
|
UI Backend on a dedicated Docker host |
|
AI Agent with PostgreSQL on a separate host |
|
All UI services on a single Docker host |
|
SSL certificate setup for different deployment scenarios |
|
Running from |
|
Adding fonts for PDF export |
Authentication & SSO
Keycloak is the shared identity server for every login type except the built-in database
login. Deploy it once, then configure it per login type.
| Page | Description |
|---|---|
Deploy the Keycloak container: Docker Compose, storage schema, TLS, shared network, HA, and the general interaction architecture |
|
SAML login type: backend variables, IdP certificates, and the Keycloak SAML realm/client/mapper setup (reference guide) |
|
LDAP login type: backend variables, TLS trust, and the Keycloak OIDC client + LDAP User Federation setup |
|
Azure AD login type: Keycloak brokering to Microsoft Entra ID over OIDC |
|
Windows login type: silent Kerberos SSO brokered by Keycloak against Active Directory |