version: '<version>'
services:
    safenet_access_exchange:
        image: <imageID>
        container_name: sae
        ports:
            - 443:8443
        volumes:
            - /path/to/your/certificate/certificate.pem:/opt/keycloak/conf/<certificate.pem>:Z
            - /path/to/correspondingPrivateKey/privateKey.pem:/opt/keycloak/conf/<privateKey.pem>:Z
        environment:
            - KC_HOSTNAME=<fqdn or IP of the SAE instance>
            - KEYCLOAK_ADMIN=admin
            - KEYCLOAK_ADMIN_PASSWORD=<change_me>
            - KC_HTTPS_CERTIFICATE_FILE=/opt/keycloak/conf/<certificate.pem>
            - KC_HTTPS_CERTIFICATE_KEY_FILE=/opt/keycloak/conf/<privateKey.pem>
            - KC_DB=<mssql or mysql as per your environment>
            - KC_DB_URL=<jdbc connection string>
            - KC_TRANSACTION_XA_ENABLED=false
            - KC_DB_USERNAME=<dbUser>
            - KC_DB_PASSWORD=<password>
            #- KC_HOSTNAME_STRICT_HTTPS=false #Uncomment this line if admin instance of SAE goes into loop while loading.
            - FIDO2_API_URL=http://<<IP-Address>>:8080/fido2 #Use this to use FIDO based authentications with SAS-PCE by updating IP address where fido server is deployed
        command:
            - start-dev