# Scenario C: directory swap — OpenLDAP replaces LLDAP, Keycloak replaces KeyCape.
#
# The LDIF and realm JSON are produced by scripts/test-scenario-c.sh before this
# stack starts. OpenLDAP imports any LDIF mounted into its bootstrap directory.
services:
  openldap:
    # osixia/openldap imports every .ldif mounted into its bootstrap directory
    # at first start. Pinned: this is the image the scenario was proved against.
    image: osixia/openldap:1.5.0
    command: ["--copy-service"]
    environment:
      - LDAP_ORGANISATION=NetKingdom
      - LDAP_DOMAIN=netkingdom.local
      - LDAP_ADMIN_PASSWORD=adminpassword
    volumes:
      - ./build/scenario-c/ldif:/container/service/slapd/assets/config/bootstrap/ldif/custom:ro
    ports:
      - "1389:389"

  keycloak:
    image: quay.io/keycloak/keycloak:26.0
    command: ["start-dev", "--import-realm"]
    environment:
      - KC_BOOTSTRAP_ADMIN_USERNAME=admin
      - KC_BOOTSTRAP_ADMIN_PASSWORD=admin
      - KC_HEALTH_ENABLED=true
    volumes:
      - ./build/scenario-c/realm:/opt/keycloak/data/import:ro
    ports:
      - "8080:8080"
    depends_on:
      - openldap