ansible/roles/docker/tasks/services/keycloak.yml

- name: setup keycloak containers for sso.data.coop
  docker_compose:
    project_name: "keycloak"
    pull: "yes"
    definition:
      version: "3.6"
      services:

        postgres:
          image: "postgres:10"
          restart: "unless-stopped"
          networks:
            - "keycloak"
          volumes:
            - "{{ keycloak.volume_folder }}/data:/var/lib/postgresql/data"
          environment:
            POSTGRES_USER: "keycloak"
            POSTGRES_PASSWORD: "{{ postgres_passwords.keycloak }}"
            POSTGRES_DB: "keycloak"

        app:
          image: "quay.io/keycloak/keycloak:15.0.2"
          restart: "unless-stopped"
          networks:
            - "keycloak"
            - "postfix"
            - "external_services"
          environment:
            VIRTUAL_HOST: "{{ keycloak.domain }}"
            VIRTUAL_PORT: "8080"
            LETSENCRYPT_HOST: "{{ keycloak.domain }}"
            LETSENCRYPT_EMAIL: "{{ letsencrypt_email }}"
            DB_USER: "keycloak"
            DB_PASSWORD: "{{ postgres_passwords.keycloak }}"
            DB_ADDR: "keycloak_postgres_1"
            #KEYCLOAK_USER: "{{ keycloak_secrets.admin_user }}" # Only used for the first run of the application to set up the admin user
            #KEYCLOAK_PASSWORD: "{{ keycloak_secrets.admin_password }}"
            PROXY_ADDRESS_FORWARDING: "true"
             
      networks:
        keycloak:
        postfix:
          external: true
        external_services:
          external: true