{ config, lib, pkgs, ... }:

{
  age.secrets."dragon-keycloak.age".file = ../secrets/dragon-keycloak.age;
  services.postgresql.enable = true;
  services.keycloak = {
    enable = true;
    settings.hostname = "auth.orbekk.com";
    settings.log-level = "INFO";
    settings.http-port = (import ../data/aliases.nix).services.keycloak.http-port;
    settings.hostname-strict-https = false;
    settings.proxy = "edge";
    database.type = "postgresql";
    database.passwordFile = config.age.secrets."dragon-keycloak.age".path;
  };
}