# -----------------------------
# Keycloak POC on Hugging Face with H2 auto-schema
# -----------------------------
ARG KEYCLOAK_VERSION=25.0.6
FROM quay.io/keycloak/keycloak:${KEYCLOAK_VERSION} AS builder

# Use H2 in dev mode (memory or file)
ENV KC_DB=dev-file

# Build the optimized server
RUN /opt/keycloak/bin/kc.sh build

# -----------------------------
# Runtime image
# -----------------------------
FROM quay.io/keycloak/keycloak:${KEYCLOAK_VERSION}

ENV KEYCLOAK_ADMIN=admin \
    KEYCLOAK_ADMIN_PASSWORD=admin \
    KC_HTTP_PORT=7860 \
    KC_HOSTNAME_STRICT=false \
    KC_HOSTNAME_STRICT_HTTPS=false \
    KC_DB=dev-file \
    KC_DB_URL=jdbc:h2:file:/tmp/keycloakdb;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE \
    KC_DB_USERNAME=sa \
    KC_DB_PASSWORD=sa \
    KC_DB_SCHEMA=public \
    KC_DB_SCHEMA_UPDATE=update \
    KC_LOG_LEVEL=INFO

COPY --from=builder /opt/keycloak/ /opt/keycloak/

EXPOSE 7860

ENTRYPOINT ["/opt/keycloak/bin/kc.sh"]
CMD ["start", "--optimized", "--http-enabled=true", "--http-port=7860", "--hostname=0.0.0.0"]