TYPO3 appliance manual
Everything about running the appliance: SONIA preparation, installation, languages, search, Keycloak client, sign-in via Keycloak, backup and the way into production.
What is the appliance?
The appliance is a ready-made Docker setup for TYPO3 14.3 LTS as a Composer installation. TYPO3 runs on PHP 8.4-FPM behind nginx 1.30, the data lives in MariaDB 11.8 LTS, and Elasticsearch 9.5 provides the full-text search. Backend sign-in uses Keycloak (OpenID Connect), and the website is bilingual.
Five containers work together:
| Service | Purpose |
|---|---|
web | nginx: serves static files and forwards PHP requests to php |
php | TYPO3 on PHP-FPM, installs TYPO3 automatically on first start |
db | MariaDB 11.8 |
elasticsearch | search index of the frontend, only reachable on the internal Docker network |
scheduler | runs typo3 scheduler:run every minute and typo3 search:index every 15 minutes |
The following pages describe setup and operation. The “Configuration files” section explains how each configuration file works in detail.
- SONIA preparation Once per machine: the hosts entry for id.dev.sonia.de and the root certificate of the Ostfalia computing centre – for Linux (Debian/Ubuntu), macOS and Windows.
- Quick start and structure Starting the appliance, project structure, persistent data and installing extensions.
- Languages and home page German as default, English under /en/, the backend language and the site package with its language switch.
- Search and privacy Full-text search with Elasticsearch: search field, index, updates, failure behaviour – and why the website does without a CDN.
- Setting up the Keycloak client Step by step with screenshots: creating the client typo3-v14 in realm sonia – access, protocol, logout, client secret, roles, mapper and client scopes.
- Sign-in via Keycloak Backend login via OpenID Connect: Keycloak client, roles, login page, single logout and back-channel logout.
- Operations and backup Useful commands, backup and restore, the self-extracting archive and resetting.
- Production What to do before running on a server: passwords, host names, TLS and ports.