# {{ ansible_managed }}
version: "3.8"

services:
  server:
    image: jboss/keycloak
    container_name: keycloak
    restart: always
    environment:
      - USER_UID={{ getent_passwd["keycloak"].1 }}
      - USER_GID={{ getent_passwd["keycloak"].2 }}
      - "KEYCLOAK_USER=${USERNAME}"
      - "KEYCLOAK_PASSWORD=${PASSWORD}"
    volumes:
      - ./certificates:/etc/x509/https
    ports:
      - {{ keycloak_https_port }}:8443