35e7b10f23
One fewer image to pull from docker hub that eats into our rate limits. Note that deployment of this change will restart at least the mariadb container on the server. Change-Id: I21e7f707f0876aeb348af14efe57fe327ab594a9
50 lines
1.4 KiB
Django/Jinja
50 lines
1.4 KiB
Django/Jinja
# Version 2 is the latest that is supported by docker-compose in
|
|
# Ubuntu Xenial.
|
|
version: '2'
|
|
|
|
services:
|
|
mariadb:
|
|
# 10.11 was synonymous with the "lts" tag when we brought up the service
|
|
image: quay.io/opendevmirror/mariadb:10.11
|
|
network_mode: host
|
|
restart: always
|
|
environment:
|
|
MARIADB_ROOT_PASSWORD: "{{ keycloak_root_db_password }}"
|
|
MARIADB_DATABASE: keycloak
|
|
MARIADB_USER: keycloak
|
|
MARIADB_PASSWORD: "{{ keycloak_db_password }}"
|
|
volumes:
|
|
- /var/lib/keycloak/db:/var/lib/mysql
|
|
- /var/lib/keycloak/99-bind-address.cnf:/etc/mysql/conf.d/99-bind-address.cnf:ro
|
|
logging:
|
|
driver: syslog
|
|
options:
|
|
tag: docker-mariadb
|
|
keycloak:
|
|
depends_on:
|
|
- mariadb
|
|
image: quay.io/keycloak/keycloak:23.0
|
|
network_mode: host
|
|
restart: always
|
|
environment:
|
|
KC_DB_PASSWORD: "{{ keycloak_db_password }}"
|
|
KC_DB_USERNAME: keycloak
|
|
KEYCLOAK_ADMIN: admin
|
|
KEYCLOAK_ADMIN_PASSWORD: "{{ keycloak_admin_password }}"
|
|
command:
|
|
- 'start'
|
|
- '--hostname-strict=false'
|
|
- '--http-enabled=true'
|
|
- '--http-host=::1'
|
|
- '--proxy=edge'
|
|
- '--db=mariadb'
|
|
# Wrap the DB host address here because it ends up inserted into a
|
|
# colon-delimited JDBC URL internally.
|
|
- '--db-url-host=[::1]'
|
|
- '--db-url-port=3306'
|
|
- '--db-url-database=keycloak'
|
|
logging:
|
|
driver: syslog
|
|
options:
|
|
tag: docker-keycloak
|