.env.sample

@@ -7,6 +7,9 @@ KEYCLOAK_CLIENT_ID=barfoo
 KEYCLOAK_DOMAIN=foobar.com
 KEYCLOAK_REALM=bazrealm
 
+#KEYCLOAK_GROUPS_KEY="groups"
+#KEYCLOAK_ADMINS_GROUP="Administrators"
+
 APP_THEME=default
 INVITE_TIME_LIMIT=30  # days
 
@@ -14,3 +17,5 @@ SECRET_APP_SECRET_KEY_VERSION=v1
 SECRET_KEYCLOAK_CLIENT_SECRET_VERSION=v1
 
 AUTOMATICALLY_LOG_IN=False
+
+#FEATURE_FLAG_ADMINS_ONLY=False

compose.yml

@@ -8,10 +8,13 @@ services:
       - APP_SECRET_KEY_FILE=/run/secrets/app_secret_key
       - APP_THEME
       - AUTOMATICALLY_LOG_IN
+      - FEATURE_FLAG_ADMINS_ONLY
       - INVITE_TIME_LIMIT
+      - KEYCLOAK_ADMINS_GROUP
       - KEYCLOAK_CLIENT_ID
       - KEYCLOAK_CLIENT_SECRET_FILE=/run/secrets/keycloak_client_secret
       - KEYCLOAK_DOMAIN
+      - KEYCLOAK_GROUPS_KEY
       - KEYCLOAK_REALM
       - REDIS_DB=0
       - REDIS_HOST=cache