version: '3.8'

services:
  identity:
    image: quay.io/keycloak/keycloak:latest
    restart: always
    command:
      - start-dev
    environment:
      KC_FEATURES: ${KC_FEATURES}
      KEYCLOAK_ADMIN: ${KC_ADMIN_USER}
      KEYCLOAK_ADMIN_PASSWORD: ${KC_ADMIN_PASSWORD}
      PROXY_ADDRESS_FORWARDING: "true"
      KC_PROXY: edge
      KC_PROXY_HEADERS: xforwarded
      KC_HOSTNAME: ${KC_HOSTNAME}
      KC_HOSTNAME_STRICT_HTTPS: "true"
      KC_HTTP_ENABLED: "true"
    networks:
      - plan-b
      - nginx-network

networks:
  plan-b:
    external: true
  nginx-network:
    external: true