version: '3.8'

services:

  postgres:
      container_name: postgres_keycloak
      image: postgres:15.5-alpine3.19
      volumes:
        - postgres_volume:/var/lib/postgresql/data
      environment:
        POSTGRES_DB: ${DB_DATABASE}
        POSTGRES_USER: ${DB_USER}
        POSTGRES_PASSWORD: ${DB_PASSWORD}
      networks:
        - bizmatch

  auth:
    container_name: keycloak
    image: quay.io/keycloak/keycloak:latest
    ports:
      - "8080:8080"
    environment:
      DB_VENDOR: ${DB_VENDOR}
      # DB_ADDR: database
      # DB_PORT: 5432
      # DB_SCHEMA: public    
      DB_DATABASE: ${DB_DATABASE}
      DB_USER: ${DB_USER}
      DB_PASSWORD: ${DB_PASSWORD}    
      KEYCLOAK_ADMIN: ${KEYCLOAK_ADMIN}
      KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
      KC_PROXY_MODE: edge
      KC_METRICS_ENABLED: true
      KC_HTTP_ENABLED: true      
      KC_HOSTNAME: ${HOSTNAME}
      KC_HOSTNAME_ADMIN: ${HOSTNAME}
      PROXY_ADDRESS_FORWARDING: true
      KC_HOSTNAME_STRICT: false
      # - KEYCLOAK_ADMIN=admin
      # - KEYCLOAK_ADMIN_PASSWORD=aiaiaia
      # - KC_HOSTNAME_ADMIN=auth.bizmatch.net
      # - KC_PROXY=edge
      # - KC_HOSTNAME=auth.bizmatch.net
      # - KC_METRICS_ENABLED=true
      # - KC_HEALTH_ENABLED=true
      # - KC_DB=postgres
      # - KC_DB_PASSWORD=password
      # - KC_DB_SCHEMA=public
      # - KC_DB_USERNAME=keycloak
      # - KC_DB_URL_HOST=postgres
      # - KC_DB_URL_DATABASE=keycloak
      # - PROXY_ADDRESS_FORWARDING=true
        #- KC_LOG_LEVEL=ALL
    depends_on:
      - postgres
    command:
      - start
    volumes:
      - ./auth/import:/opt/keycloak/data/import
      - ./keywind.jar:/opt/keycloak/providers/keywind.jar
    networks:
      - bizmatch

networks:
  bizmatch:
    external: true

volumes:
  postgres_volume:
    external: true