Various fixes.

defaults/main.yml

@@ -38,7 +38,7 @@ keycloak_database_user: keycloak_u
 keycloak_database_host: 'localhost'
 keycloak_database_max_pool_size: '50'
 keycloak_database_jboss_connection_checker: True
-
+keycloak_database_idle_timeouts_min: 1
 keycloak_admin_user: kadmin
 #keycloak_admin_password: 'define it into a vault file'
 

meta/main.yml

@@ -24,12 +24,18 @@ galaxy_info:
   galaxy_tags:
     - users
     - oidc
+    - oauth
+    - saml
 
 dependencies:
   - src: git+https://gitea-s2i2s.isti.cnr.it/ISTI-ansible-roles/ansible-role-openjdk.git
     version: master
     name: openjdk
     state: latest
+  - src: git+https://gitea-s2i2s.isti.cnr.it/ISTI-ansible-roles/ansible-role-nginx.git
+    version: master
+    name: nginx
+    state: latest
 
 collections:
   - wildfly.jcliff

tasks/keycloak-install.yml

@@ -31,9 +31,13 @@
       - 'server.log'
       - 'audit.log'
 
-  - name: Fix the permissions of some keycloak directories
+  - name: Fix the permissions of the directories into keycloak must be able to write
     file: dest={{ keycloak_install_dir }}/{{ keycloak_distribution }}/{{ keycloak_wildfly_mode }}/{{ item }} state=directory owner={{ keycloak_user }} group={{ keycloak_user }} mode='0750' recurse=yes
     with_items: '{{ keycloak_owned_directories }}'
+
+  - name: Fix the permissions of the keycloak data directorie if they are inside the distribution
+    file: dest={{ keycloak_install_dir }}/{{ keycloak_distribution }}/{{ keycloak_wildfly_mode }}/data/{{ item }} state=directory owner={{ keycloak_user }} group={{ keycloak_user }} mode='0750' recurse=yes
+    with_items: '{{ keycloak_data_subdirs }}'
     when: keycloak_data_directory == keycloak_distribution_data_directory
 
   - name: Remove the log directory inside the keycloak distribution

templates/standalone-ha.xml.j2

@@ -139,6 +139,9 @@
                     <pool>
                         <max-pool-size>{{ keycloak_database_max_pool_size }}</max-pool-size>
                     </pool>
+                    <timeout>
+                        <idle-timeout-minutes>{{ keycloak_database_idle_timeouts_min }}</idle-timeout-minutes>
+                    </timeout>
                     <validation>
                     {% if keycloak_database_jboss_connection_checker %}
                         <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.postgres.PostgreSQLValidConnectionChecker"></valid-connection-checker>

templates/standalone.xml.j2

@@ -137,6 +137,9 @@
                     <pool>
                         <max-pool-size>{{ keycloak_database_max_pool_size }}</max-pool-size>
                     </pool>
+                   <timeout>
+                        <idle-timeout-minutes>{{ keycloak_database_idle_timeouts_min }}</idle-timeout-minutes>
+                    </timeout>
                     <validation>
                     {% if keycloak_database_jboss_connection_checker %}
                         <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.postgres.PostgreSQLValidConnectionChecker"></valid-connection-checker>

vars/main.yml

@@ -11,7 +11,6 @@ keycloak_download_url: 'https://downloads.jboss.org/keycloak/{{ keycloak_version
 keycloak_runtime_home: '{{ keycloak_install_dir }}/{{ keycloak_distribution }}'
 jboss_home: '{{ keycloak_runtime_home }}'
 keycloak_owned_directories:
-  - data
   - tmp
   - configuration
   - deployments