# {{ansible_managed}}

[Unit]
After=network.target

[Service]
{% if kc_tmp_admin is defined %}

# temp admin user
Environment="KC_BOOTSTRAP_ADMIN_USERNAME={{kc_admin_user}}"
Environment="KC_BOOTSTRAP_ADMIN_PASSWORD={{kc_admin_pass}}"

{% endif %}
User=keycloak
Group=keycloak
SuccessExitStatus=143
ExecStart=/opt/keycloak/bin/kc.sh start --optimized \
        --http-enabled true \
        --http-host 127.0.0.1 \
        --http-port 8081 \
        --proxy-headers xforwarded \
        --proxy-trusted-addresses 127.0.0.1/32 \
        --hostname {{kc_root_url}} \
        --db-url-host {{kc_db_host}} \
        --db-url-database {{kc_db_name}} \
        --db-username {{kc_db_user}} \
        --db-password {{kc_db_pass}} \
        --log="console"

WorkingDirectory=/opt/keycloak

[Install]
WantedBy=multi-user.target