version: '3.8'

services:
  keycloak:
    image: quay.io/keycloak/keycloak:latest
    command: start --http-enabled=true --hostname-strict=false --hostname-strict-https=false
    environment:
      KC_DB: postgres
      KC_DB_URL: jdbc:postgresql://postgres-db:5432/keycloak
      KC_DB_USERNAME: postgres
      KC_DB_PASSWORD: 98836
      KEYCLOAK_ADMIN: admin
      KEYCLOAK_ADMIN_PASSWORD: eE24619840420*
      KC_PROXY_HEADERS: none
      KC_HTTP_ENABLED: 'true'
    ports:
      - target: 8080
        published: 8084
        protocol: tcp
        mode: host
    networks:
      - postgres_network
      - keycloak-net
    deploy:
      replicas: 2
      update_config:
        parallelism: 1
        delay: 10s
      restart_policy:
        condition: on-failure

volumes:
  postgres_data:
networks:
  postgres_network:
    external: true
  keycloak-net:
    driver: overlay
    attachable: true