docker-compose.yaml

version: '3'
services:
  keycloak:
    image: quay.io/keycloak/keycloak:23.0.4
    environment:
      KC_HOSTNAME: sandbox.auth.library.ucdavis.edu
      KC_HEALTH_ENABLED: true
      KC_METRICS_ENABLED: true
      KC_PROXY: edge
      KC_DB: postgres
      KC_DB_URL: jdbc:postgresql://db/postgres
    depends_on:
      db:
        condition: service_started
      init:
        condition: service_completed_successfully
    env_file:
      - .env
    ports:
      - 3123:8080
    command: ["start"]
  db:
    image: postgres:15.3
    env_file:
      - .env
    volumes:
      - db-data:/var/lib/postgresql/data
  backup:
    image: gcr.io/ucdlib-pubreg/auth-kc-utils:v1.0.1
    env_file:
      - .env
    depends_on:
      - db
    environment:
      PGHOST: 'db'
      PGDATABASE: 'postgres'
      PGPORT: 5432
      GOOGLE_APPLICATION_CREDENTIALS: /etc/service-account.json
      GC_BACKUP_BUCKET: itis-iam/keycloak
      BACKUP_FILE_NAME: db.sql.gz
    volumes:
      - ./gc-writer-key.json:/etc/service-account.json
    command: ./backup/entrypoint.sh
  init:
    image: gcr.io/ucdlib-pubreg/auth-kc-utils:v1.0.1
    env_file:
      - .env
    depends_on:
      - db
    environment:
      PGHOST: 'db'
      PGDATABASE: 'postgres'
      PGPORT: 5432
      GOOGLE_APPLICATION_CREDENTIALS: /etc/service-account.json
      GC_BACKUP_BUCKET: itis-iam/keycloak
      BACKUP_FILE_NAME: db.sql.gz
    volumes:
      - ./gc-reader-key.json:/etc/service-account.json
    command: ./init/init.sh
volumes:
  db-data: