apiVersion: k8s.keycloak.org/v2alpha1
kind: Keycloak
metadata:
  name: keycloak
  namespace: default
spec:
  instances: 1
  image: quay.io/keycloak/keycloak:latest
  startOptimized: false
  db:
    vendor: postgres
    host: birdfeeder2.home.nest
    port: 5432
    database: keycloak
    usernameSecret:
      name: keycloak-db-secret
      key: username
    passwordSecret:
      name: keycloak-db-secret
      key: password
  http:
    httpEnabled: true
  hostname:
    hostname: sso.mynest.love
    strict: true
  additionalOptions:
    - name: proxy-headers
      value: xforwarded
    - name: hostname-strict-https
      value: "true"
    - name: bootstrap-admin-username
      secret:
        name: keycloak-admin-login
        key: username
    - name: bootstrap-admin-password
      secret:
        name: keycloak-admin-login
        key: password
  ingress:
    enabled: false