k3s/services/keycloak/keycloak-deployment.yaml

apiVersion: k8s.keycloak.org/v2beta1
kind: Keycloak
metadata:
  name: keycloak
  namespace: default
spec:
  instances: 1
  image: quay.io/keycloak/keycloak:latest
  startOptimized: false
  db:
    vendor: postgres
    host: birdfeeder2.home.nest
    port: 5432
    database: keycloak
    usernameSecret:
      name: keycloak-db-secret
      key: username
    passwordSecret:
      name: keycloak-db-secret
      key: password
  http:
    httpEnabled: true
  hostname:
    hostname: sso.mynest.love
    strict: true
  bootstrapAdmin:
    user:
      secret: keycloak-admin-login
  additionalOptions:
    - name: proxy-headers
      value: xforwarded
  ingress:
    enabled: false