diff --git a/examples/keycloak/docker-compose.yml b/examples/keycloak/docker-compose.yml
index eb13dc0c..78ee3903 100644
--- a/examples/keycloak/docker-compose.yml
+++ b/examples/keycloak/docker-compose.yml
@@ -1,22 +1,32 @@
 version: '2'
 services:
   oidc-example:
-    image: vertigo/vkpr-oidc-demo
+    image: vertigo/vkpr-oidc-demo:latest
     network_mode: "host"
     ports:
       - 5443:5443
     environment:
-      - ISSUER=http://keycloak.localdomain:8080/auth/realms/vkpr
+      - AUTHORIZATION_ENDPOINT=http://keycloak.localdomain:8080/auth/realms/vkpr/protocol/openid-connect/auth
+      - TOKEN_ENDPOINT=http://keycloak.localdomain:8080/auth/realms/vkpr/protocol/openid-connect/token
       - LOGOUT_ENDPOINT=http://keycloak.localdomain:8080/auth/realms/vkpr/protocol/openid-connect/logout
+      - JWKS_URI=http://keycloak.localdomain:8080/auth/realms/vkpr/protocol/openid-connect/certs
+      - REGISTRATION_ENDPOINT=http://keycloak.localdomain:8080/auth/realms/vkpr/clients-registrations/openid-connect
       - DISABLE_HTTPS=true
       - REVOCATION_ENDPOINT=
+      - ISSUER=http://keycloak.localdomain:8080/auth/realms/vkpr
       - CLIENT_ID=oidc-demo
       - CLIENT_SECRET=60e50da1-b492-4995-9574-763fa285456c
       - REDIRECT_URI=http://localhost:5443/callback
       - BASE_URL=http://localhost:5443
       - VERIFY_SSL_SERVER=false
       - DEBUG=true
-      #- JWKS_URI=http://keycloak.localdomain:8080/auth/realms/vkpr/protocol/openid-connect/certs
-      #- REGISTRATION_ENDPOINT=http://keycloak.localdomain:8080/auth/realms/vkpr/clients-registrations/openid-connect
-      #- AUTHORIZATION_ENDPOINT=http://keycloak.localdomain:8080/auth/realms/vkpr/protocol/openid-connect/auth
-      #- TOKEN_ENDPOINT=http://keycloak.localdomain:8080/auth/realms/vkpr/protocol/openid-connect/token
+  jwt-example:
+    image: vertigo/vkpr-jwt-demo:latest
+    network_mode: "host"
+    ports:
+      - 8000:8000
+    environment:
+      - KEYCLOAK_AUTH_URL=http://vkpr-keycloak-http.default.svc/auth
+      - KEYCLOAK_REALM=springboot
+      - KEYCLOAK_CLIENT_ID=springboot-client
+      - KEYCLOAK_CLIENT_SECRET=e28e961b-2f86-4877-a696-b76cd231105