{% include 'roles/sys-svc-container/templates/env.j2' %}

KC_HOSTNAME={{ OIDC.URL }}
KC_HTTP_ENABLED=true

{% if not (lookup('tls', application_id, 'enabled') | bool) %}
KC_HOSTNAME_STRICT=false
KC_HOSTNAME_STRICT_HTTPS=false
{% endif %}

KC_PROXY_HEADERS=xforwarded

{% if IS_SWARM_MODE %}
KC_CACHE=ispn
KC_CACHE_STACK=jdbc-ping
KC_CACHE_EMBEDDED_NETWORK_BIND_ADDRESS=match-address:{{ lookup('subnet_address_regex') }}
{% else %}
KC_CACHE=local
{% endif %}

KC_HEALTH_ENABLED={{ KEYCLOAK_HEALTH_ENABLED | lower }}
KC_METRICS_ENABLED=true

KC_DB={{ lookup('database', application_id, 'type') }}
KC_DB_URL={{ lookup('database', application_id, 'url_jdbc') }}
KC_DB_USERNAME={{ lookup('database', application_id, 'username') }}
KC_DB_PASSWORD={{ lookup('database', application_id, 'password') | dotenv_quote }}

KC_BOOTSTRAP_ADMIN_USERNAME={{ KEYCLOAK_BOOTSTRAP_ADMIN_USERNAME }}
KC_BOOTSTRAP_ADMIN_PASSWORD={{ KEYCLOAK_BOOTSTRAP_ADMIN_PASSWORD | dotenv_quote }}

KEYCLOAK_PERMANENT_ADMIN_USERNAME={{ KEYCLOAK_PERMANENT_ADMIN_USERNAME }}
KEYCLOAK_PERMANENT_ADMIN_PASSWORD={{ KEYCLOAK_PERMANENT_ADMIN_PASSWORD | dotenv_quote }}

{% if MODE_DEBUG | bool %}
KC_LOG_LEVEL=INFO
KC_LOG_LEVEL_ORG_KEYCLOAK_STORAGE_LDAP=DEBUG
KC_LOG_LEVEL_ORG_LDAPSDK=DEBUG
{% endif %}