updated keycloak version, symlink to current and new systemd file

templates/keycloak.service.j2

@@ -6,28 +6,27 @@ Wants=network-online.target systemd-networkd-wait-online.service
 [Service]
 User=keycloak
 Group=keycloak
-ExecStart=/opt/keycloak/keycloak-{{ keycloak_version }}/bin/kc.sh start
-WorkingDirectory=/opt/keycloak/keycloak-{{ keycloak_version }}
+ExecStart=/opt/keycloak/current/bin/kc.sh start
+WorkingDirectory=/opt/keycloak/current
 ReadWritePaths=/opt/keycloak/keycloak-{{ keycloak_version }}/conf
 ReadWritePaths=/opt/keycloak/keycloak-{{ keycloak_version }}/data
 ReadWritePaths=/opt/keycloak/keycloak-{{ keycloak_version }}/lib/quarkus
 SuccessExitStatus=0 143
-
 TimeoutStartSec=600
 TimeoutStopSec=600
 Environment="KC_HTTP_HOST={{ keycloak_http_host }}"
-Environment="KC_HOSTNAME=https://{{ inventory_hostname }}"
+Environment="KC_HTTP_ENABLED=true"
+Environment="KC_HOSTNAME={{ inventory_hostname }}"
 Environment="KC_DB=postgres"
 Environment="KC_DB_USERNAME={{ keycloak_postgresql_username }}"
 Environment="KC_DB_PASSWORD={{ keycloak_postgresql_password }}"
 Environment="KC_DB_URL_DATABASE={{ keycloak_postgresql_database }}"
 Environment="KC_DB_URL_HOST=localhost"
-#Environment="KC_HTTP_RELATIVE_PATH=auth"
-Environment="KC_HTTP_ENABLED=true"
-Environment="KC_PROXY_HEADERS=forwarded"
 Environment="KEYCLOAK_ADMIN={{ keycloak_initial_admin_name }}"
 Environment="KEYCLOAK_ADMIN_PASSWORD={{ keycloak_initial_admin_password }}"
-Environment="KC_PROXY_TRUSTED_ADDRESSES=127.0.0.0/8"
+Environment="KC_PROXY=edge"
+Environment="KC_PROXY_HEADERS=xforwarded"
+Environment="KC_PROXY_TRUSTED_ADDRESSES=127.0.0.1"
 
 # Hardening options
 CapabilityBoundingSet=