version: '3'

services:
  keycloak:
    image: quay.io/keycloak/keycloak:latest
    container_name: keycloak_keycloak
    logging:
      driver: loki
      options:
        loki-url: http://localhost:3100/loki/api/v1/push
        loki-batch-size: "50"
        loki-retries: "1"
        loki-timeout: "2s"
        keep-file: "true"
    networks:
      keycloak:
      web:
        aliases:
          - keycloak
    restart: "no"
    command: start-dev
    environment:
      - KEYCLOAK_ADMIN=jafner
      - KEYCLOAK_ADMIN_PASSWORD=iEKfrgdTLfbdqtMkH&FMrL3#t8^qfy%eSY5G94tfnUdQB3G!%CUaoFJuhCUN
    env_file:
      - .env
    labels:
      traefik.http.routers.keycloak.rule: Host(`keycloak.jafner.net`)
      traefik.http.routers.keycloak.tls.certresolver: lets-encrypt
      traefik.http.routers.keycloak.middlewares: securityheaders@file
      traefik.http.services.keycloak.loadbalancer.server.port: 8080

networks:
  keycloak:
  web:
    external: true