001_momo_koeln: Add keycloak

hosts/host_001_momo_koeln/configuration.nix

@@ -5,6 +5,8 @@
     [
       # Include the results of the hardware scan.
       ./hardware-configuration.nix
+
+      ./keycloak.nix
     ];
 
   pub-solar.core.lite = true;

hosts/host_001_momo_koeln/keycloak.nix

@@ -0,0 +1,25 @@
+{
+  config,
+  lib,
+  inputs,
+  pkgs,
+  self,
+  ...
+}: {
+  age.secrets.keycloak-database-password = {
+    file = "${self}/secrets/keycloak-database-password.age";
+    mode = "700";
+  };
+
+  # keycloak
+  services.keycloak = {
+    enable = true;
+    database.passwordFile = config.age.secrets.keycloak-database-password.path;
+    settings = {
+      hostname = "auth.momo.koeln";
+      http-host = "127.0.0.1";
+      http-port = 8080;
+      proxy = "edge";
+    };
+  };
+}