# PROJECT: 康来生物有限公司kicc(智慧冷链)分布式架构平台
# VERSION: 1.0.0
# Author: 康来生物科技有限公司-王翔
# 身份验证资源访问管理平台（解决多个系统之间用户数据一致并且提供sso登陆）
# https://www.keycloak.org/server/all-config
version: '3'
services:
  keycloak:
    image: bitnami/keycloak:22.0.1-debian-11-r4
    container_name: keycloak
    hostname: keycloak
    restart: always
    environment:
      - KEYCLOAK_USER=admin
      - KEYCLOAK_PASSWORD=kanglai123
      - DB_VENDOR=postgres
      - DB_ADDR=postgresql
      - DB_PORT=5432
      - DB_DATABASE=kicc_keycloak
      - DB_SCHEMA=public
      - DB_USER=postgresql
      - DB_PASSWORD=kanglai@2023
      #- KC_HTTP_RELATIVE_PATH=/auth
      - KEYCLOAK_HTTPS_CERTIFICATE_FILE=/cert/ssl.pem
      - KEYCLOAK_HTTPS_CERTIFICATE_KEY_FILE=/cert/ssl.key
      - KEYCLOAK_HTTPS_USE_PEM=true
      - KEYCLOAK_ENABLE_HTTPS=true
      - KEYCLOAK_PRODUCTION=true
    volumes:
      - /usr/software/dockerDatabase/keycloak/cert:/cert
      - /usr/software/dockerDatabase/keycloak/data:/opt/jboss/keycloak/standalone/data
      - /usr/software/dockerDatabase/keycloak/themes:/opt/jboss/keycloak/themes
    depends_on:
      - postgresql
    ports:
      - 8889:8080
      - 8443:8443
    networks:
      - keycloak_net
  postgresql:
    image: postgres:15.3
    container_name: postgresql
    hostname: postgresql
    restart: always
    environment:
      POSTGRES_USER: postgresql
      POSTGRES_PASSWORD: kanglai@2023
      POSTGRES_DB: kicc_keycloak
    volumes:
      - postgresql:/var/lib/postgresql/data
    ports:
      - 5438:5432
    networks:
      - keycloak_net

volumes:
  postgresql:
    driver: local

networks:
  keycloak_net: {}