version: '3.8'

services:

  postgres:
      container_name: postgres_keycloak
      image: postgres:15.7-alpine3.19
      volumes:
        - postgres_volume:/var/lib/postgresql/data
      environment:
        POSTGRES_DB: ${POSTGRES_DB}
        POSTGRES_USER: ${POSTGRES_USER}
        POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      networks:
        - bizmatch

  auth:
    container_name: keycloak
    image: quay.io/keycloak/keycloak:latest
    restart: unless-stopped
    ports:
      - "8080:8080"
    environment:
      - DB_DATABASE=${DB_HOST}
      - DB_USER=${POSTGRES_USER}
      - DB_PASSWORD=${POSTGRES_PASSWORD}      
      - KC_DB=postgres
      - KC_DB_URL_HOST=${DB_HOST}
      - KC_DB_URL_DATABASE=${POSTGRES_DB}
      - KC_DB_USERNAME=${POSTGRES_USER}
      - KC_DB_PASSWORD=${POSTGRES_PASSWORD}
      - KC_PROXY=edge
      - KC_HOSTNAME=${HOSTNAME}
      - KC_HOSTNAME_ADMIN=${HOSTNAME}
      - KC_TRANSACTION_XA_ENABLED=false
        # - KC_HOSTNAME_ADMIN_URL=${KEYCLOAK_URL} 
      - KC_METRICS_ENABLED=true
      - KC_HEALTH_ENABLED=true
      - KC_HOSTNAME_STRICT=false
      - KC_HTTP_ENABLED=true
      - KC_HOSTNAME_STRICT_HTTPS=false
        # - PROXY_ADDRESS_FORWARDING=true
      - KC_LOG_LEVEL=INFO
    depends_on:
      - postgres
    command:
      - start
    volumes:
      - ./auth/import:/opt/keycloak/data/import
      - ./keywind.jar:/opt/keycloak/providers/keywind.jar
    networks:
      - bizmatch

networks:
  bizmatch:
    external: true

volumes:
  postgres_volume:
    external: true