version: '3'
  
volumes:
  simfony_keycloak:

services:
  keycloak:
          # image: docker.ibasis.net/simfony/devops/keycloak
      image: 354466585750.dkr.ecr.eu-central-1.amazonaws.com/simfony/core/keycloak
      #hostname: keycloak
      #privileged: true
      #network_mode: host
      container_name: keycloak
      restart: always
      command: -Dkeycloak.profile.feature.upload_scripts=enabled #-Djboss.http.port=8050
      # extra_hosts:
              #- "10.59.106.212"
      environment:
        DB_VENDOR: MYSQL
        DB_ADDR: 172.20.64.140
        DB_PORT: 3306
        DB_DATABASE: sso_db
        DB_USER: root
        DB_PASSWORD: "xM9A4!exJbQNhqJ"
        JDBC_PARAMS: "useSSL=false"
        KEYCLOAK_USER: admin
        KEYCLOAK_PASSWORD: 7qK3ce82UVLd64sAe9KTDDeYCDmmv6wNNSCJYF2u
        # Uncomment the line below if you want to specify JDBC parameters. The parameter below is just an example, and it shouldn't be used in production without knowledge. It is highly recommended that you read the MySQL JDBC driver documentation in order to use it.
        #JDBC_PARAMS: "connectTimeout=30000"
        KEYCLOAK_PROFILE_PREVIEW: 'true'
        #JGROUPS_DISCOVERY_PROTOCOL: TCPPING
        #JGROUPS_DISCOVERY_EXTERNAL_IP: 77.68.123.142
        #JGROUPS_DISCOVERY_PROPERTIES: initial_hosts="93.90.195.154[7600],77.68.123.142[7600]"
        PROXY_ADDRESS_FORWARDING: 'true'
        JAVA_TOOL_OPTIONS: '-Xms512m -Xmx1G -XX:+UseG1GC -XX:MaxGCPauseMillis=200 -XX:ParallelGCThreads=4'
        #INITIALIZE_EMPTY: 'false'
        #CACHE_OWNERS_COUNT: 2
        #CACHE_OWNERS_AUTH_SESSIONS_COUNT: 2
        KEYCLOAK_LOGLEVEL: DEBUG
        #ROOT_LOGLEVEL: DEBUG
      ports:
        - 172.20.64.140:8050:8080
        #- 7600:7600
      networks:
        - portal_qa
      volumes:
#        - simfony_keycloak:/opt/jboss/keycloak/themes
        - ./deployments:/opt/jboss/keycloak/standalone/deployments/
        - ./config/docker-entrypoint.sh:/opt/jboss/tools/docker-entrypoint.sh
        - ./themes:/opt/jboss/keycloak/themes
        - ./resolv.conf:/etc/resolv.conf
        #- ./config/standalone-ha.xml:/opt/jboss/keycloak/standalone/configuration/standalone-ha.xml
        #- ./cert/:/etc/x509/https      
      deploy:
        resources:
          limits:
            memory: 2g
            cpus: "1.0"
networks:
  portal_qa:
    external: true