keycloak:
    image: quay.io/keycloak/keycloak:26.1
    command: start
    volumes:
      - /opt/containers/certs/ipa_ca.crt:/opt/keycloak/conf/truststores/ipa_ca.crt:ro
    environment:
      - VIRTUAL_HOST=${KEYCLOAK_HOSTNAME}
      - VIRTUAL_PORT=8080
      - KC_HOSTNAME=https://${KEYCLOAK_HOSTNAME}
      - KC_HTTP_ENABLED=true
      - KEYCLOAK_ADMIN=${KEYCLOAK_ADMIN}
      - KEYCLOAK_ADMIN_PASSWORD=${KEYCLOAK_ADMIN_PASSWORD}
      - KC_DB=postgres
      - KC_DB_URL=jdbc:postgresql://postgres/${POSTGRES_DB}
      - KC_DB_USERNAME=${POSTGRES_USER}
      - KC_DB_PASSWORD=${POSTGRES_PASSWORD}