version: '3'

services:
  keycloak-db:
      container_name: keycloak-db
      image: postgres:13
      restart: always
      volumes:
        - /mnt/containers/keycloak/container-data/db:/var/lib/postgresql/data:Z
      environment:
        POSTGRES_DB: keycloak
        POSTGRES_USER: keycloak
        POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
  keycloak:
      container_name: keycloak
      image: quay.io/keycloak/keycloak:latest
      restart: always
      entrypoint: ["/opt/keycloak/bin/kc.sh", "start-dev"]
      environment:
        DB_VENDOR: POSTGRES
        DB_ADDR: keycloak-db
        DB_DATABASE: keycloak
        DB_USER: keycloak
        DB_SCHEMA: public
        DB_PASSWORD: ${POSTGRES_PASSWORD}
        KEYCLOAK_ADMIN: admin
        KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_PASSWORD}
        KC_HOSTNAME: localhost
        PROXY_ADDRESS_FORWARDING: true
        REDIRECT_SOCKET: proxy-https
        KEYCLOAK_FRONTEND_URL: https://auth.jaredtsmith.com/
      ports:
        - 8080:8080
      depends_on:
        - keycloak-db