.env

# Please see the README.m for details on steps to be taken when updating Keycloak
KEYCLOAK_VERSION=26.0.5

KC_BOOTSTRAP_ADMIN_USERNAME=root
KC_BOOTSTRAP_ADMIN_PASSWORD=test
KEYCLOAK_BASE_URL=http://auth.openfoodfacts.localhost:5600
KEYCLOAK_REALM_NAME=open-products-facts
KEYCLOAK_TAG=main
COMPOSE_PROJECT_NAME=openfoodfacts-auth
COMPOSE_PATH_SEPARATOR=,
COMPOSE_FILE_RUN=docker-compose.yml,docker-compose-run.yml
COMPOSE_FILE=${COMPOSE_FILE_RUN},docker/dev.yml

# This is the administrator for the PostgreSQL instance so would be very secret
PG_ADMIN_USERNAME=postgres
PG_ADMIN_PASSWORD=SuperSecret123!

# This user has minimal permissions to create other users, so is less secret
PG_BOOTSTRAP_USERNAME=bootstrap
PG_BOOTSTRAP_PASSWORD=off

# This is the specific user for this service
KC_DB_URL_HOST=keycloak_postgres
KC_DB_USERNAME=keycloak
KC_DB_PASSWORD=Secret123!

# Clients are provided in a space delimited list in the form CLIENT_ID,BASE_URL
CLIENTS=OFF,http://world.openfoodfacts.localhost OPFF,https://world.openpetfoodfacts.org

REDIS_URL=redis:6379
SMTP_SERVER=smtp

# Network to expose on. To restrict to local host only KEYCLOAK_EXPOSE=127.0.0.1:
# ends with ":"
KEYCLOAK_EXPOSE=
KEYCLOAK_HTTP_PORT=5600
KEYCLOAK_MANAGEMENT_PORT=5602

# Set to "prod" for hardened deployment or "dev" for start-dev.
KEYCLOAK_STARTUP=dev

COMMON_NET_NAME=off_shared_network

# Following are only needed for tests
SMTP4DEV_PORT=5605
TEST_CLIENT_ID=test-client
TEST_CLIENT_SECRET=test-secret123