From 1b8a02e5be92091992ad6bb095ed33c5272db977 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thorben=20G=C3=BCnther?= <admin@xenrox.net>
Date: Mon, 25 Apr 2022 13:08:35 +0200
Subject: [PATCH] keycloak: Sort conf like default conf

Easier to compare changes.
---
 roles/keycloak/templates/keycloak.conf.j2 | 36 ++++++++++++++++++++++-
 1 file changed, 35 insertions(+), 1 deletion(-)

diff --git a/roles/keycloak/templates/keycloak.conf.j2 b/roles/keycloak/templates/keycloak.conf.j2
index f95b934..28a1b57 100644
--- a/roles/keycloak/templates/keycloak.conf.j2
+++ b/roles/keycloak/templates/keycloak.conf.j2
@@ -1,10 +1,44 @@
-hostname=keycloak.xenrox.net
+# Basic settings for running in production. Change accordingly before deploying the server.
+
+# Database
 
+# The database vendor.
 db=postgres
+
+# The username of the database user.
 db-username=keycloak
+
+# The password of the database user.
 db-password={{ keycloak_secrets['psql_password'] }}
+
+# The full database JDBC URL. If not provided, a default URL is set based on the selected database vendor.
 db-url=jdbc:postgresql://localhost/keycloak
 
+# Observability
+
+# If the server should expose healthcheck endpoints.
+#health-enabled=true
+
+# If the server should expose metrics endpoints.
+#metrics-enabled=true
+
+# HTTP
+
+# The file path to a server certificate or certificate chain in PEM format.
+#https-certificate-file=${kc.home.dir}conf/server.crt.pem
+
+# The file path to a private key in PEM format.
+#https-certificate-key-file=${kc.home.dir}conf/server.key.pem
+
+# The proxy address forwarding mode if the server is behind a reverse proxy.
+#proxy=reencrypt
+
+# Do not attach route to cookies and rely on the session affinity capabilities from reverse proxy
+#spi-sticky-session-encoder-infinispan-should-attach-route=false
+
+# Hostname for the Keycloak server.
+hostname=keycloak.xenrox.net
+
 http-enabled=true
 http-host=127.0.0.1
 http-port=8444
-- 
2.44.0