#1 Remove admin user from docker-composer.yml and create...

#1 Remove admin user from docker-composer.yml and create a specific script instead which only needs to be executed once after first installation

tasks/keycloak.yml

@@ -50,3 +50,12 @@
   with_items: '{{ keycloak_settings }}'
   tags:
     - cron
+
+- name: Add script to create admin user
+  copy:
+    content: docker exec keycloak_keycloak_1 /opt/jboss/keycloak/bin/add-user-keycloak.sh -u {{ item.admin.username }} -p '{{ item.admin.password }}'
+    dest: /mnt/{{ item.id }}/create-admin-user
+    owner: root
+    group: root
+    mode: 0755
+  with_items: '{{ keycloak_settings }}'

templates/docker-compose.yml

@@ -24,8 +24,6 @@ services:
       DB_USER: keycloak
       DB_SCHEMA: public
       DB_PASSWORD: password
-      KEYCLOAK_USER: '{{ item.admin.username }}'
-      KEYCLOAK_PASSWORD: '{{ item.admin.password }}'
       PROXY_ADDRESS_FORWARDING: 'true'
       KEYCLOAK_ALWAYS_HTTPS: 'true'
     restart: always