Deploying keycloak to the cloud


I’m a beginner to keycloak so apologies for the naive questions.
I have a web application deployed on a cloud with a user login/registration form.
I would like to bind these 2 forms to keycloak for authentication and authorization of the users.
Is there a good tutorial on how to do this on google cloud or azure cloud?
Can the keycloak be deployed on the same virtual machine as the web application or should it be deployed separately?
What are the best practises for a secure login/registration with keycloak on a cloud?

Thanks for your help.