services:
  postgres:
    image: postgres:15
    container_name: keycloak-db
    environment:
      POSTGRES_DB: keycloak
      POSTGRES_USER: keycloak
      POSTGRES_PASSWORD: password
    volumes:
      - ./data/postgres:/var/lib/postgresql/data
    #ports:
    #  - 5432:5432
    restart: unless-stopped
  keycloak:
    image: quay.io/keycloak/keycloak:26.4
    container_name: keycloak-server
    volumes:
      - ./certs:/etc/x509/https
      - ./trusts:/opt/keycloak/conf/truststores

    environment:
      KEYCLOAK_ADMIN: admin
      KEYCLOAK_ADMIN_PASSWORD: admin

      KC_DB: postgres
      KC_DB_URL: jdbc:postgresql://postgres:5432/keycloak
      KC_DB_USERNAME: keycloak
      KC_DB_PASSWORD: password

      KC_HTTPS_CERTIFICATE_FILE: /etc/x509/https/lt642223.regioit.local.crt
      KC_HTTPS_CERTIFICATE_KEY_FILE: /etc/x509/https/lt642223.regioit.local.key

      KC_HTTP_ENABLED: true
      # KC_PROXY: edge
      KC_HOSTNAME: lt642223.regioit.local

    ports:
      - 8443:8443
    command: start
    depends_on:
      - postgres
    restart: unless-stopped