Keycloak override default SPI with Docker

I have created my custom SPI for brute-force detection. On local env I just added this in standalone-ha.xml:

        <spi name="bruteForceProtector">
            <default-provider>bw-brute-force-detector</default-provider>
            <provider name="bw-brute-force-detector" enabled="true">
            </provider>
        </spi>

This doesn't work anymore when we are using Docker. How I can pack and override default SPI with docker? I saw some approach with cli scrips but there is no clear example so I can understand... Can someone help?