added keycloak with [start] command

deploy_matrix.yml

@@ -39,10 +39,11 @@
         - "{{ vol_db }}"  
         - "{{ npm_data }}"
         - "{{ npm_letsencrypt }}"
-        - "{{ lemonldap_data }}"
+        - "{{ keycloak_data }}"
+        - "{{ vol_kc_db }}"
 
     # -----------------------------------------------------------------
-    # Pull required images (including Teamspeak)
+    # Pull required images 
     # -----------------------------------------------------------------
 
     - name: Pull coturn image
@@ -244,4 +245,39 @@
         network: "{{ podman_network }}"
         restart_policy: always
 
-    
+    # -----------------------------------------------------------------
+    # Start Keyclaok and supporting DB containers
+    # -----------------------------------------------------------------
+
+    - name: start Keyclaok Database container
+      containers.podman.podman_container:
+        name: keycloak-db
+        image: "{{ db_image }}"
+        state: started
+        env:
+          POSTGRES_USER: "{{ keycloak_postgres_user }}"
+          POSTGRES_PASSWORD: "{{ keycloak_postgres_pw }}"
+          POSTGRES_DB: "{{ keycloak_db }}"
+        volumes:
+          - "{{ vol_kc_db }}:/var/lib/postgresql/data"        
+        network: "{{ podman_network }}"
+        restart_policy: always
+
+    - name:  Start Keycloak authentication container
+      containers.podman.podman_container:
+        name: "{{ keycloak_container_name }}"
+        image: "{{ keycloak_image }}"
+        command: ["start"]
+        env:
+          KC_DB: postgres
+          KC_DB_URL: jdbc:keycloak-db://postgres/keycloak
+          KC_DB_USERNAME: "{{ keycloak_postgres_user }}"
+          KC_DB_PASSWORD: "{{ keycloak_postgres_pw }}"
+          KC_HOSTNAME: "{{ keycloak_domain }}"
+          KC_HOSTNAME_PORT: "{{ kc_hn_port }}"
+          KEYCLOAK_ADMIN: "{{ keycloak_admin }}"
+          KEYCLOAK_ADMIN_PASSWORD: "{{ keycloak_pw }}"
+        volumes:
+          - "{{ keycloak_data }}:/opt/keycloak/data:Z"
+        network: "{{ podman_network }}"
+        restart_policy: always