version: '3'

services:
  keycloak:
    image: quay.io/keycloak/keycloak:23.0.3
    container_name: keycloak
    restart: always
    command: start --proxy=edge
#    command: start-dev  # pour debug
    ports:
      - 8080:8080
    depends_on:
      - keycloak_db
    env_file:
      - .env
    # volumes:
    #   - ./keycloak/certs:/opt/jboss/keycloak/standalone/configuration/certs:ro
    #   - ./keycloak/conf/standalone.xml:/opt/jboss/keycloak/standalone/configuration/standalone-ha.xml:ro

  keycloak_db:
    image: postgres:13
    container_name: keycloak-db
    restart: always
    volumes:
      - ./postgres:/var/lib/postgresql/data
    ports:
      - 5435:5432
    env_file:
      - .env

  openldap:
    image: osixia/openldap
    container_name: keycloak-openldap
    restart: always
    volumes:
      - ./keycloak/ldap_ldif:/container/service/slapd/assets/config/bootstrap/ldif/custom
      - ./keycloak/ldap_db:/var/lib/ldap
      - ./keycloak/ldap_conf:/etc/ldap/slapd.d
    command: ["--copy-service"]
    env_file:
      - .env
    tty: true
    stdin_open: true
    domainname: legaragenumerique.fr
    hostname: "ldap"
    ports:
      - "389:389"
      - "636:636"