FROM quay.io/keycloak/keycloak:26.0.7

ENV KC_DB=postgres
ENV KC_FEATURES=token-exchange,scripts,admin-fine-grained-authz

RUN /opt/keycloak/bin/kc.sh build

LABEL org.opencontainers.image.authors=""
LABEL org.opencontainers.image.url="https://dev.ccchb.de/ccchb/oci-images/src/branch/main/keycloak"
LABEL org.opencontainers.image.source="https://dev.ccchb.de/ccchb/oci-images/src/branch/main/keycloak"
LABEL org.opencontainers.image.documentation="https://dev.ccchb.de/ccchb/oci-images/src/branch/main/keycloak"
LABEL org.opencontainers.image.version=26.0.5
LABEL org.opencontainers.image.vendor="CCC Bremen"
LABEL org.opencontainers.image.description="Keycloak image for auth.ccchb.de"

ENTRYPOINT ["/opt/keycloak/bin/kc.sh"]