Wrapped keycloak in a nix flake

flake.nix

@@ -0,0 +1,52 @@
+{
+  description = "Nix flake wrapper around keycloak";
+  inputs = {
+     nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+     flake-utils.url = "github:numtide/flake-utils";
+  };
+
+  outputs = { self, nixpkgs,  flake-utils }:
+    flake-utils.lib.eachDefaultSystem (system:
+      let
+        pkgs = nixpkgs.legacyPackages.${system};
+        keycloak-src = pkgs.fetchzip {
+            url = "https://github.com/keycloak/keycloak/releases/download/21.1.1/keycloak-21.1.1.tar.gz";
+            hash = "sha256-ZX5UKjU9BEtO/uA25WhSUmeO6jQ1FpKF1irFx2fwPBU=";
+        };
+        keycloak-build-script = ''
+          export JAVA_HOME=${pkgs.graalvm17-ce}
+          cp lib/lib/main/org.keycloak.keycloak-themes-21.1.1.jar providers
+          mkdir -p data/password-blacklists
+          mkdir -p data/tmp
+          echo "$(tail -n +2 bin/kc.sh)" >> bin/kc.new.sh
+          chmod +x bin/kc.new.sh
+          bin/kc.new.sh build --db dev-file
+        '';
+        keycloak-dev-build = pkgs.stdenv.mkDerivation {
+          name = "keycloak-dev-build";
+          src = keycloak-src;
+          buildPhase = keycloak-build-script;
+          installPhase = ''
+          cp -r . $out
+          '';
+        };
+        dev-server = pkgs.writeShellApplication {
+          name = "custom-server";
+          runtimeInputs = [pkgs.graalvm17-ce keycloak-dev-build];
+          text = "export keycloak=${keycloak-dev-build}\n" + (builtins.readFile ./dev-server.sh);
+        };
+        server = pkgs.writeShellApplication {
+          name = "keycloak";
+          runtimeInputs = [pkgs.graalvm17-ce keycloak-src];
+          text = "export keycloak=${keycloak-dev-build}\n" + (builtins.readFile ./server.sh);
+
+        };
+
+      in
+        {
+          packages = {
+            default = server;
+          };
+        }
+      );
+}