services:
  keycloak:
    image: quay.io/keycloak/keycloak:nightly
    container_name: keycloak
    environment:
      # Bootstrap Admin Credentials
      KC_BOOTSTRAP_ADMIN_USERNAME: admin
      KC_BOOTSTRAP_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
      # Database Configuration
      KC_DB: postgres
      KC_DB_URL: jdbc:postgresql://keycloak-db:5432/keycloak
      KC_DB_USERNAME: ${KC_DB_USERNAME}
      KC_DB_PASSWORD: ${KC_DB_PASSWORD}
      # Hostname and Proxy Configuration
      KC_HOSTNAME_STRICT: "false"
      KC_HOSTNAME_STRICT_HTTPS: "true"
      KC_HOSTNAME_DEFAULT_ADMIN: auth.mrx8086.com
      KC_PROXY: "edge"
      # Additional Settings
      KC_HTTP_ENABLED: "true"
      KC_HTTPS_REQUIRED: "external"
    command:
      - start-dev
    ports:
      - "8080:8080"
    volumes:
      - ../config/keycloak/themes:/opt/keycloak/themes:ro
    networks:
      - keycloak-network
    depends_on:
      - keycloak-db
    restart: unless-stopped

  keycloak-db:
    image: postgres:15
    container_name: keycloak-db
    environment:
      POSTGRES_DB: keycloak
      POSTGRES_USER: ${KC_DB_USERNAME}
      POSTGRES_PASSWORD: ${KC_DB_PASSWORD}
    volumes:
      - ../data/keycloak/db:/var/lib/postgresql/data
    networks:
      - keycloak-network
    restart: unless-stopped

networks:
  keycloak-network:
    driver: bridge