# Overlay: make the CI compose stack usable from a HOST browser.
# Same two mechanisms infra/docker-compose.local.yml already uses — pin Keycloak's issuer to the
# host-published address, and point each portal's runtime config.json at it. The BFF needs no
# change: it discovers metadata over keycloak:8080 and the discovered issuer is the pinned
# localhost:8180, which is what browser tokens carry.
services:
  keycloak:
    environment:
      KC_HOSTNAME: http://localhost:8180
      KC_HOSTNAME_BACKCHANNEL_DYNAMIC: "true"
  self-service:
    volumes:
      - ./local-config/self-service.config.json:/usr/share/caddy/config.json:ro,z
  behandel:
    volumes:
      - ./local-config/behandel.config.json:/usr/share/caddy/config.json:ro,z
  # beheer is the same medewerker realm as behandel, so it reuses behandel's config verbatim.
  beheer:
    volumes:
      - ./local-config/behandel.config.json:/usr/share/caddy/config.json:ro,z