bump keycloak to work on arm chips

TECHNICAL_DETAILS.md

@@ -71,7 +71,12 @@ The monitoring should probably be on it's own network ;-)
 
 ## Keycloak
 
-Lots going on here!   Keycloak in non localhost wants SSL, so make sure to disable it in the administration tool.
+Lots going on here!   We have migrated to the Quarkus version, which promises better startup times, but
+we don't use the production version, so we get a 12 second start up penality ;-(.
+
+https://github.com/eabykov/keycloak-compose for ideas.
+
+Keycloak in non localhost wants SSL, so make sure to disable it in the administration tool.
 
 ```
 In the "master" realm, over login tab. Change 'Require SSL' property to none.

docker-compose.yml

@@ -150,9 +150,15 @@ services:
       ZOO_4LW_COMMANDS_WHITELIST: mntr,conf,ruok
       ZOO_CFG_EXTRA: "metricsProvider.className=org.apache.zookeeper.metrics.prometheus.PrometheusMetricsProvider metricsProvider.httpPort=7000 metricsProvider.exportJvmInfo=true"
 
+  redis:
+    container_name: quepid_redis
+    image: redis:6.2.7-alpine
+    ports:
+      - 6379:6379
+
   quepid:
     container_name: quepid
-    image: o19s/quepid:6.11.0
+    image: o19s/quepid:6.12.0
     ports:
       - 3000:3000
     command: "foreman s -f Procfile"
@@ -161,6 +167,7 @@ services:
       - RACK_ENV=production
       - RAILS_ENV=production
       - DATABASE_URL=mysql2://root:password@mysql:3306/quepid
+      - REDIS_URL=redis://redis:6379/1
       - FORCE_SSL=false
       - MAX_THREADS=2
       - WEB_CONCURRENCY=2
@@ -178,8 +185,10 @@ services:
       - SIGNUP_ENABLED=true
     links:
       - mysql
+      - redis
     depends_on:
       - mysql
+      - redis
 
   rre:
     container_name: rre
@@ -216,6 +225,10 @@ services:
     container_name: prometheus
     restart: always
     hostname: prometheus
+    healthcheck:
+      test: ["CMD", "wget", "--tries=1", "--spider", "http://localhost:9090"]
+      interval: 5s
+      timeout: 10s
     ports:
       - 9090:9090
     command:
@@ -226,8 +239,12 @@ services:
   grafana:
     image: grafana/grafana:7.5.13
     container_name: grafana
-    restart: always
+    restart: unless-stopped
     hostname: grafana
+    healthcheck:
+      test: ["CMD", "wget", "--tries=1", "--spider", "http://localhost:3000"]
+      interval: 5s
+      timeout: 10s
     ports:
       - 9091:3000
     volumes:
@@ -239,16 +256,21 @@ services:
       - prometheus
 
   keycloak:
-    image: quay.io/keycloak/keycloak:16.1.0
+    image: quay.io/keycloak/keycloak:18.0.2
     container_name: keycloak
     hostname: keycloak
-    command: ["-b", "0.0.0.0", "-Dkeycloak.migration.action=import", "-Dkeycloak.migration.provider=dir", "-Dkeycloak.migration.dir=/opt/jboss/keycloak/realm-config", "-Dkeycloak.migration.strategy=OVERWRITE_EXISTING", "-Djboss.socket.binding.port-offset=1000", "-Dkeycloak.profile.feature.upload_scripts=enabled"]
+    #command: ["-b", "0.0.0.0", "-Dkeycloak.migration.action=import", "-Dkeycloak.migration.provider=dir", "-Dkeycloak.migration.dir=/opt/jboss/keycloak/realm-config", "-Dkeycloak.migration.strategy=OVERWRITE_EXISTING", "-Djboss.socket.binding.port-offset=1000", "-Dkeycloak.profile.feature.upload_scripts=enabled"]
+    #command: ["start-dev", "-Dkeycloak.migration.action=import", "-Dkeycloak.migration.provider=dir", "-Dkeycloak.migration.dir=/opt/jboss/keycloak/realm-config", "-Dkeycloak.migration.strategy=OVERWRITE_EXISTING", "-Dkeycloak.profile.feature.upload_scripts=enabled"]
+    command: ["start-dev", "--import-realm"]
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "--fail", "http://localhost:8080/health"]
     ports:
       - 9080:9080
-      - 9443:9443
     environment:
-      KEYCLOAK_USER: admin
-      KEYCLOAK_PASSWORD: password
+      KC_HTTP_PORT: 9080
+      KEYCLOAK_ADMIN: admin
+      KEYCLOAK_ADMIN_PASSWORD: password
       DB_VENDOR: h2
     volumes:
-      - ./keycloak/realm-config:/opt/jboss/keycloak/realm-config
+      - ./keycloak/realm-config/chorus-realm.json:/opt/keycloak/data/import/chorus-realm.json:ro