services:
  keycloak:
    image: quay.io/keycloak/keycloak
    container_name: keycloak
    expose:
      - "8080"
    networks:
      - proxy
    env_file:
      - runtime.env
    environment:
      KC_DB: postgres
      KC_DB_URL: jdbc:postgresql://postgres:3212/keycloak
      KC_DB_USERNAME: bapasqui
      KC_HOSTNAME: https://auth.chatons.duckdns.org
      KC_HEALTH_ENABLED: "true"
    command:
      - start-dev
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true

networks:
  proxy:
    name: proxy
    external: true