---
# keycloak defaults/main.yml
#
# SPDX-FileCopyrightText: © 2021 Open Networking Foundation <support@opennetworking.org>
# SPDX-License-Identifier: Apache-2.0
#
keycloak_java_version: 11

keycloak_behind_reverse_proxy: true
keycloak_server: "http://localhost:8080"
keycloak_admin_api: "{{ keycloak_server }}/auth/admin/realms/master"
keycloak_username: "keycloak"
keycloak_groupname: "keycloak"
keycloak_comment: "Keycloak, an identity and access management solution "
keycloak_shell: "/usr/sbin/nologin"

keycloak_download_url:
    "https://github.com/keycloak/keycloak/releases/download/\
    {{ keycloak_version }}/keycloak-{{ keycloak_version}}.tar.gz"
keycloak_version: 15.0.2
keycloak_checksum: "sha256:1915e33b3789eb426fda06676e39b9ddf3a7b563e1e2381a92a02da814dad047"

keycloak_base_dir: /opt
keycloak_dist_dir: "{{ keycloak_base_dir }}/dist/keycloak"
keycloak_working_dir: "{{ keycloak_base_dir}}/keycloak"

keycloak_admin_username: "admin"
keycloak_admin_password: "changeme"

keycloak_listen_address: "0.0.0.0"

# client_settings is a list of Keycloak client to configure - see README.md
keycloak_client_settings: []

# ldap configuration
keycloak_ldap_sync_registration: "true"
keycloak_ldap_vendor: "rhds"
keycloak_ldap_username: "uid"
keycloak_ldap_rdn: "uid"
keycloak_ldap_uuid: "nsuniqueid"
keyclaok_ldap_user_object: "inetOrgPerson,organizationalPerson"
keycloak_ldap_server: "ldap://127.0.0.1:389"
keycloak_ldap_userdn: "ou=people,dc=testing,dc=org"
keycloak_ldap_admin_dn: "cn=Directory Manager"
keycloak_ldap_admin_password: "changeme"
keycloak_ldap_group_dn: "ou=groups,dc=testing,dc=org"