feat: usermanagement keycloak

roles/usermanagement/templates/keycloak.env

@@ -0,0 +1,9 @@
+KEYCLOAK_ADMIN=admin
+KEYCLOAK_ADMIN_PASSWORD={{ keycloak_admin_password }}
+PROXY_ADDRESS_FORWARDING=true
+KC_PROXY=edge
+KC_LOG_LEVEL=ALL
+
+KC_DB_URL_HOST=postgres
+KC_DB_USERNAME=keycloak
+KC_DB_PASSWORD={{ keycloak_postgres_password }}

roles/usermanagement/templates/keycloak.yaml

@@ -0,0 +1,35 @@
+---
+
+version: '3.3'
+
+services:
+  keycloak:
+    container_name: keycloak-container
+    command: start-dev --http-enabled=true
+    image: quay.io/keycloak/keycloak:18.0.0
+    env_file: keycloak.env
+    restart: unless-stopped
+    ports:
+    - 5050:8080
+    depends_on:
+    - postgres
+    secrets:
+    - postgres_password
+  postgres:
+    container_name: postgres-container
+    image: postgres:13.2
+    env_file: postgres.env
+    restart: unless-stopped
+    secrets:
+    - postgres_password
+    volumes:
+    - postgres-data:/var/lib/postgresql/data
+
+secrets:
+  postgres_password:
+    file: postgres_password
+
+volumes:
+  postgres-data:
+
+...

roles/usermanagement/templates/postgres.env

@@ -0,0 +1,3 @@
+POSTGRES_DB=keycloak
+POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
+POSTGRES_USER=keycloak

roles/usermanagement/templates/postgres_password

@@ -0,0 +1 @@
+{{ keycloak_postgres_password }}