Add env and secrets

.env.sample

@@ -2,3 +2,9 @@ TYPE=keycloak-collective-portal
 
 DOMAIN=keycloak-collective-portal.example.com
 LETS_ENCRYPT_ENV=production
+
+KEYCLOAK_DOMAIN=foobar.com
+KEYCLOAK_CLIENT_ID=barfoo
+
+SECRET_APP_SECRET_KEY=v1
+SECRET_KEYCLOAK_CLIENT_SECRET=v1

compose.yml

@@ -25,6 +25,14 @@ services:
 
   app:
     image: "decentral1se/keycloak-collective-portal:latest"
+    environment:
+      - APP_SECRET_KEY=/run/secrets/app_secret_key
+      - KEYCLOAK_CLIENT_ID
+      - KEYCLOAK_CLIENT_SECRET_FILE=/run/secrets/client_secret
+      - KEYCLOAK_DOMAIN
+    secrets:
+      - app_secret_key
+      - keycloak_client_secret
     networks:
       - internal
     configs:
@@ -49,3 +57,11 @@ configs:
     name: ${STACK_NAME}_entrypoint_conf_${ENTRYPOINT_CONF_VERSION}
     file: entrypoint.sh.tmpl
     template_driver: golang
+
+secrets:
+  app_secret_key:
+    external: true
+    name: ${STACK_NAME}_app_secret_key_${SECRET_APP_SECRET_KEY}
+  keycloak_client_secret:
+    external: true
+    name: ${STACK_NAME}_keycloak_client_secret_${SECRET_KEYCLOAK_CLIENT_SECRET}