infrastructure/roles/keycloak/defaults/main.yml

---
# Default variables for the keycloak role

# Infrastructure
# Ansible instructions to deploy the infrastructure
# Copyright (C) 2019-2020  Christoph (Sheogorath) Kern
# Copyright (C) 2020       Alexander Wellbrock
# Copyright (C) 2020       Saibotk
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3 of the License.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

# Install locations
keycloak_install_location: /srv/keycloak
keycloak_database_location: "{{ keycloak_install_location }}/database"

# The keycloak image to use
keycloak_baseimage: quay.io/keycloak/keycloak

# The keycloak & postgres version
# !!! Don't just update the postgres version, instead backup first and check if you need to migrate !!!
# renovate: depName=quay.io/keycloak/keycloak
keycloak_version: 22.0.1
# renovate: depName=docker.io/library/postgres
keycloak_postgres_version: 11.16

# The image tags
keycloak_image_version: "{{ keycloak_version }}"
keycloak_postgres_image_version: "{{ keycloak_postgres_version }}-alpine"

# The log level settings for keycloak
keycloak_log_level: "ERROR"
keycloak_root_log_level: "ERROR"

# The certresolver traefik should use for this domain
keycloak_traefik_certresolver: letsencrypt_http

# The domain which traefik will serve keycloak under
keycloak_domain: keycloak.example.com

# The database credentials.
keycloak_database_user: "keycloak"
keycloak_database_password: "{{ lookup('passwordstore', keycloak_domain + '/database' + ' create=true') }}"

# The default welcome theme keycloak will use
keycloak_theme_welcome: "{{ omit }}"

# The SELinux level that should be used for the postgres data folder/container
keycloak_postgres_selinux_level: "{{ omit }}"