version: '3.7'
services:
  isard-sso-keycloak:
    image: ${KEYCLOAK_IMG}
    container_name: isard-sso-keycloak
    #hostname: sso.${DOMAIN}
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - ${BUILD_ROOT_PATH}/init/keycloak/jsons:/opt/jboss/keycloak/imports # Uses the environment var!
      - ${BUILD_ROOT_PATH}/init/keycloak/scripts/:/opt/jboss/startup-scripts/
      - ${CUSTOM_PATH}/custom/system/keycloak/themes:/opt/jboss/keycloak/themes
      # - ${CUSTOM_PATH}/custom/system/keycloak/themes/liiibre:/opt/jboss/keycloak/themes/liiibre
      # - ${CUSTOM_PATH}/custom/system/keycloak/themes/liiibrelite:/opt/jboss/keycloak/themes/liiibrelite
      # - ${CUSTOM_PATH}/isard-sso/docker/keycloak/themes/keycloak:/opt/jboss/keycloak/themes/keycloak
      #- ${BUILD_ROOT_PATH}/docker/keycloak/extensions/keycloak-avatar-minio-extension/:/opt/custom/deployments
      #- ${BUILD_ROOT_PATH}/docker/keycloak/extensions/keycloak-avatar-minio-extension/:/opt/custom/deployments
      - ${BUILD_ROOT_PATH}/docker/keycloak/extensions/keycloak-avatar-minio-extension/avatar-minio-extension-bundle/target/avatar-minio-extension-bundle-1.0.1.0-SNAPSHOT.ear:/opt/jboss/keycloak/standalone/deployments/avatar-minio-extension-bundle-1.0.1.0-SNAPSHOT.ear
      #- /opt/jboss/keycloak/standalone/configuration/keycloak-add-user.json
    environment:
      - KEYCLOAK_IMPORT=/opt/jboss/keycloak/imports/realm.json 
      - DB_VENDOR=POSTGRES
      - DB_ADDR=${KEYCLOAK_DB_ADDR}
      - DB_DATABASE=${KEYCLOAK_DB_DATABASE}
      - DB_USER=${KEYCLOAK_DB_USER}
      - DB_SCHEMA=public
      - DB_PASSWORD=${KEYCLOAK_DB_PASSWORD}
      - KEYCLOAK_USER=${KEYCLOAK_USER}
      - KEYCLOAK_PASSWORD=${KEYCLOAK_PASSWORD}
      - PROXY_ADDRESS_FORWARDING=true
      - KEYCLOAK_FRONTEND_URL=https://sso.${DOMAIN}/auth/
      - DDADMIN_USER=${DDADMIN_USER}
      - DDADMIN_PASSWORD=${DDADMIN_PASSWORD}
      #- KEYCLOAK_LOGLEVEL=ALL
      #- Dkeycloak.profile.feature.upload_scripts=enabled
    depends_on:
      - ${KEYCLOAK_DB_ADDR}
    restart: unless-stopped
    networks:
      - isard_net