version: '3.7'

services:
  isard-sso-keycloak:
    image: quay.io/keycloak/keycloak:latest
    container_name: isard-sso-keycloak
    #hostname: sso.${DOMAIN}
    volumes:
      - ${BUILD_ROOT_PATH}/init/keycloak/jsons:/opt/jboss/keycloak/imports
      - ${BUILD_ROOT_PATH}/init/keycloak/scripts/:/opt/jboss/startup-scripts/
      - ${BUILD_ROOT_PATH}/docker/keycloak/themes:/opt/jboss/keycloak/themes/
      - ${BUILD_ROOT_PATH}/docker/keycloak/extensions/keycloak-avatar-minio-extension/:/opt/custom/deployments
      #- ${BUILD_ROOT_PATH}/docker/keycloak/extensions/keycloak-avatar-minio-extension/:/opt/custom/deployments
      - ${BUILD_ROOT_PATH}/docker/keycloak/extensions/keycloak-avatar-minio-extension/avatar-minio-extension-bundle/target/avatar-minio-extension-bundle-1.0.1.0-SNAPSHOT.ear:/opt/jboss/keycloak/standalone/deployments/avatar-minio-extension-bundle-1.0.1.0-SNAPSHOT.ear
      #- /opt/jboss/keycloak/standalone/configuration/keycloak-add-user.json
    environment:
      #- KEYCLOAK_IMPORT=/opt/jboss/keycloak/imports/realm-export.json 
      - DB_VENDOR=POSTGRES
      - DB_ADDR=${KEYCLOAK_DB_ADDR}
      - DB_DATABASE=${KEYCLOAK_DB_DATABASE}
      - DB_USER=${KEYCLOAK_DB_USER}
      - DB_SCHEMA=public
      - DB_PASSWORD=${KEYCLOAK_DB_PASSWORD}
      - KEYCLOAK_USER=${KEYCLOAK_USER}
      - KEYCLOAK_PASSWORD=${KEYCLOAK_PASSWORD}
      - PROXY_ADDRESS_FORWARDING=true
      - KEYCLOAK_FRONTEND_URL=https://sso.${DOMAIN}/auth/
      #- KEYCLOAK_LOGLEVEL=ALL
      #- Dkeycloak.profile.feature.upload_scripts=enabled
    depends_on:
      - ${KEYCLOAK_DB_ADDR}
    networks:
      - isard_net