{ pkgs, ... }:
{
  services.keycloak = {
    enable = true;

    settings = {
      http-port = 8097;
      proxy = "edge";
      hostname = "auth.katzen.cafe";
    };

    database = {
      createLocally = false;
    };
  };
}