services:
  keycloak-web:
    labels:
      - traefik.http.routers.keycloak.rule=Host(`keycloak.rschneider.net`)
      - traefik.http.routers.keycloak.tls=true
      - traefik.http.services.keycloak.loadbalancer.server.port=8080
    platform: linux/amd64
    image: quay.io/keycloak/keycloak:24.0.4
    volumes:
      - ./services/keycloak/themes:/opt/keycloak/themes
    environment:
      KC_DB: mariadb
      KC_DB_URL: jdbc:mariadb://keycloak-db:3306/keycloak
      KC_DB_USERNAME: root
      KC_DB_PASSWORD: root

      KC_HOSTNAME: ${KC_HOSTNAME}
      KC_HOSTNAME_STRICT: "false"
      KC_HOSTNAME_STRICT_HTTPS: "false"

      KC_LOG_LEVEL: "info"
      KC_METRICS_ENABLED: "true"
      KC_HEALTH_ENABLED: "true"
      KEYCLOAK_ADMIN: "admin"
      KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}

#    command: start-dev --import-realm
    #    command: start-dev
    depends_on:
      - traefik_traefik
    ports:
      - 4107:8080
    networks:
      - keycloak-network

  keycloak-db:
    platform: linux/amd64
    image: mariadb:10.11.8
    networks:
      - traefik_traefik
    environment:
      MARIADB_ROOT_PASSWORD: root
      MARIADB_DATABASE: keycloak
    volumes:
      - keycloak-db-1:/var/lib/mysql
      - ./services/db/mariadb/conf.d:/etc/mysql/conf.d

networks:
  traefik_traefik:
    external: false

volumes:
  keycloak-db-1: