Update Dockerfile

Dockerfile

@@ -1,34 +1,28 @@
 FROM quay.io/keycloak/keycloak:25.0.6 as builder
+
+# Use in-memory DB
+ENV KC_DB=dev-mem
+
+WORKDIR /opt/keycloak
+
 RUN /opt/keycloak/bin/kc.sh build
 
 FROM quay.io/keycloak/keycloak:25.0.6
 
 COPY --from=builder /opt/keycloak/ /opt/keycloak/
 
-USER root
-RUN mkdir -p /opt/keycloak/certs && \
-    keytool -genkeypair \
-      -alias selfsigned \
-      -keyalg RSA \
-      -keysize 2048 \
-      -storetype JKS \
-      -keystore /opt/keycloak/certs/keystore.jks \
-      -storepass changeit \
-      -keypass changeit \
-      -validity 365 \
-      -dname "CN=localhost, OU=Dev, O=POC, L=Nowhere, ST=None, C=XX" && \
-    chown -R 1000:0 /opt/keycloak/certs
-
-USER 1000
-
-EXPOSE 7860
+WORKDIR /opt/keycloak
 
+# Default admin user
 ENV KEYCLOAK_ADMIN=admin
 ENV KEYCLOAK_ADMIN_PASSWORD=admin
 
-ENTRYPOINT ["/opt/keycloak/bin/kc.sh", "start", \
-    "--https-port=7860", \
-    "--https-key-store-file=/opt/keycloak/certs/keystore.jks", \
-    "--https-key-store-password=changeit", \
+# Expose port 7860 for Hugging Face
+EXPOSE 7860
+
+# Start in HTTP mode (HF will terminate TLS)
+ENTRYPOINT ["/opt/keycloak/bin/kc.sh", "start-dev", \
+    "--http-port=7860", \
     "--hostname-strict=false", \
-    "--db=dev-mem"]
+    "--hostname-strict-https=false", \
+    "--proxy=edge"]