infrastructure/roles/keycloak/defaults/main.yml
2024-09-10 06:05:47 +00:00

58 lines
2.1 KiB
YAML

---
# Default variables for the keycloak role
# Infrastructure
# Ansible instructions to deploy the infrastructure
# Copyright (C) 2019-2020 Christoph (Sheogorath) Kern
# Copyright (C) 2020 Alexander Wellbrock
# Copyright (C) 2020 Saibotk
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3 of the License.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
# Install locations
keycloak_install_location: /srv/keycloak
keycloak_database_location: "{{ keycloak_install_location }}/database"
# The keycloak image to use
keycloak_baseimage: quay.io/keycloak/keycloak
# The keycloak & postgres version
# !!! Don't just update the postgres version, instead backup first and check if you need to migrate !!!
# renovate: depName=quay.io/keycloak/keycloak
keycloak_version: 25.0.5
# renovate: depName=docker.io/library/postgres
keycloak_postgres_version: 11.16
# The image tags
keycloak_image_version: "{{ keycloak_version }}"
keycloak_postgres_image_version: "{{ keycloak_postgres_version }}-alpine"
# The log level settings for keycloak
keycloak_log_level: "ERROR"
keycloak_root_log_level: "ERROR"
# The certresolver traefik should use for this domain
keycloak_traefik_certresolver: letsencrypt_http
# The domain which traefik will serve keycloak under
keycloak_domain: keycloak.example.com
# The database credentials.
keycloak_database_user: "keycloak"
keycloak_database_password: "{{ lookup('passwordstore', keycloak_domain + '/database' + ' create=true') }}"
# The default welcome theme keycloak will use
keycloak_theme_welcome: "{{ omit }}"
# The SELinux level that should be used for the postgres data folder/container
keycloak_postgres_selinux_level: "{{ omit }}"