---

keycloak_id: "{{ inventory_hostname }}-keycloak"
keycloak_postgres_id: "{{ inventory_hostname }}-postgres-keycloak"

keycloak_labels: [
  '"traefik.enable=true"',
  '"traefik.http.routers.{{ keycloak_id }}.service={{ keycloak_id }}"',
  '"traefik.http.routers.{{ keycloak_id }}.rule=Host(`{{ stage_server_domain }}`)"',
  '"traefik.http.routers.{{ keycloak_id }}.entrypoints=websecure"',
  '"traefik.http.routers.{{ keycloak_id }}.tls=true"',
  '"traefik.http.routers.{{ keycloak_id }}.tls.certresolver=letsencrypt"',
  '"traefik.http.services.{{ keycloak_id }}.loadbalancer.server.port={{ service_port }}"',
]

keycloak_docker: {
  networks: [
    {
      name: front-tier,
      external: true,
    },
  ],
  services: [
    {
      name: "{{ keycloak_id }}",
      image_name: "{{ keycloak_image }}",
      image_version: "{{ keycloak_version }}",
      labels: "{{ keycloak_labels + ( keycloak_labels_additional | default([])) }}",
      command: "start",
      environment: [
        "KEYCLOAK_USER: \"{{ keycloak_admin_username }}\"",
        "KEYCLOAK_ADMIN_PASSWORD: \"{{ keycloak_admin_password }}\"",
        "KC_PROXY: \"edge\"",
        "KC_HOSTNAME: \"{{ stage_server_domain }}\"",
        "KC_DB: \"postgres\"",
        "KC_DB_USERNAME: \"{{ keycloak_postgres_username }}\"",
        "KC_DB_PASSWORD: \"{{ keycloak_postgres_password }}\"",
        "KC_DB_URL: \"jdbc:postgresql://{{ shared_service_postgres_01_hostname }}:{{ service_port_postgres }}/{{ keycloak_postgres_database }}?sslmode=require\""
      ],
      networks: [
        '"front-tier"',
      ],
      ports: [
        {
          external: "{{ service_port_keycloak_external }}",
          internal: "{{ service_port_keycloak }}",
        },
      ],
      extra_hosts: "{{ keycloak_extra_hosts | default([]) }}",
    }
  ],
}