CREATE ROLE keycloak WITH
  LOGIN
  NOSUPERUSER
  INHERIT
  NOCREATEDB
  NOCREATEROLE
  NOREPLICATION
  NOBYPASSRLS
  PASSWORD 'devpassword';

CREATE DATABASE keycloak
    WITH
    OWNER = keycloak
    ENCODING = 'UTF8'
    TABLESPACE = pg_default
    CONNECTION LIMIT = -1
    IS_TEMPLATE = False;

-- TODO
-- Replace Client Secret in realm-export.json
-- replace Frontend redirect URLS in realm-export.json
-- SET NODE_ENV=production when running on server
-- SET DEFAULT_PERSISSIONS for webapi user
-- add backend to allowed redirect urls in forntenc kc-client
-- fix web origins for kc-clients