Not necessarily the migration steps but going from bare Debian image to Keycloak exists and is configured. See also https://code.librehq.com/ots/infra/admin-tasks/-/issues/73