---

keycloak_id: "{{ inventory_hostname }}-keycloak"
keycloak_postgres_id: "{{ inventory_hostname }}-postgres-keycloak"

keycloak_labels: [
  '"traefik.enable=true"',
  '"traefik.http.routers.{{ keycloak_id }}.service={{ keycloak_id }}"',
  '"traefik.http.routers.{{ keycloak_id }}.rule=Host(`{{ stage_server_domain }}`)"',
  '"traefik.http.routers.{{ keycloak_id }}.entrypoints=websecure"',
  '"traefik.http.routers.{{ keycloak_id }}.tls=true"',
  '"traefik.http.routers.{{ keycloak_id }}.tls.certresolver=letsencrypt"',
  '"traefik.http.services.{{ keycloak_id }}.loadbalancer.server.port={{ service_port }}"',
]

keycloak_docker: {
  networks: [
    {
      name: front-tier,
      external: true,
    },
  ],
  services: [
    {
      name: "{{ keycloak_id }}",
      image_name: "{{ keycloak_image }}",
      image_version: "{{ keycloak_version }}",
      labels: "{{ keycloak_labels + ( keycloak_labels_additional | default([])) }}",
      environment: [
        "PROXY_ADDRESS_FORWARDING: \"true\"",

        "KEYCLOAK_USER: \"{{ keycloak_admin_username }}\"",
        "KEYCLOAK_PASSWORD: \"{{ keycloak_admin_password }}\"",

        "DB_VENDOR: postgres",
        "DB_DATABASE: \"{{ keycloak_postgres_database }}\"",
        "DB_USER: \"{{ keycloak_postgres_username }}\"",
        "DB_PASSWORD: \"{{ keycloak_postgres_password }}\"",
        "DB_ADDR: \"{{ keycloak_postgres_host }}\"",
        "JDBC_PARAMS: \"sslmode=require\"",
        "JAVA_OPTS_APPEND: \"-Dkeycloak.profile.feature.docker=enabled\"",
      ],
      networks: [
        '"front-tier"',
      ],
      ports: [
        {
          external: "{{ service_port_keycloak_external }}",
          internal: "{{ service_port_keycloak }}",
        },
      ],
      extra_hosts: "{{ keycloak_extra_hosts | default([]) }}",
    }
  ],
}