This manual provides some hints how to improve the security of the deployment.
The container image of the ICT endpoint is provided on DockerHub (external URL).
Follow the instructions there to deploy the container or use the Docker Compose file here to run a predefined composition with Keycloak (external URL) as OpenID Provider.