{
  "realm": "{{ item.name }}",
  "displayName": "{{ item.display_name }}",
  "enabled": {{ item.enabled | lower }},
  "sslRequired": "external",
  "registrationAllowed": false,
  "loginWithEmailAllowed": true,
  "duplicateEmailsAllowed": false,
  "resetPasswordAllowed": true,
  "editUsernameAllowed": false,
  "bruteForceProtected": true,
  "clients": [
{% for client in item.clients %}
    {
      "clientId": "{{ client.client_id }}",
      "name": "{{ client.name }}",
      "enabled": {{ client.enabled | lower }},
      "protocol": "{{ client.protocol }}",
      "publicClient": false,
      "redirectUris": {{ client.redirect_uris | to_json }},
      "webOrigins": {{ client.web_origins | to_json }},
      "standardFlowEnabled": true,
      "directAccessGrantsEnabled": false
    }{{ "," if not loop.last else "" }}
{% endfor %}
  ]
}

---SEPARATOR---

# Alliance Boréale - Keycloak Handlers
# Date: 2025-10-31

---
- name: restart keycloak
  ansible.builtin.systemd:
    name: keycloak
    state: restarted

- name: reload nginx
  ansible.builtin.systemd:
    name: nginx
    state: reloaded

- name: reload nftables
  ansible.builtin.systemd:
    name: nftables
    state: reloaded