fix(docker): resolve prod profile routing and config issues

- Fix Caddyfile SPA fallback to use base route prefix for index.html
- Add admin API reverse proxy rules matching the Helm chart template
- Mount server/config into backend container for keycloak.json
- Add KEYCLOAK_INTERNAL_URL to backend for in-container JWKS fetch
- Include keycloak and keycloak-db in prod profile

Signed-off-by: Emiliano Suñé <2395873+esune@users.noreply.github.com>

Author: esune

docker-compose.yml

@@ -59,6 +59,8 @@ services:
     build:
       context: ./
       dockerfile: ./server/Dockerfile
+    volumes:
+      - ./server/config:/app/server/config:ro
     ports:
       - '5000:5000'
     env_file:
@@ -68,6 +70,7 @@ services:
       MONGODB_PORT: '27017'
       MONGODB_DB_NAME: bc_wallet_showcase
       MONGODB_URI: mongodb://mongodb:27017/bc_wallet_showcase
+      KEYCLOAK_INTERNAL_URL: http://keycloak:8080
     depends_on:
       mongodb:
         condition: service_healthy
@@ -137,6 +140,7 @@ services:
     command: start-dev --import-realm
     profiles:
       - dev
+      - prod
     ports:
       - '8080:8080'
     volumes:
@@ -161,6 +165,7 @@ services:
     image: postgres:15-alpine
     profiles:
       - dev
+      - prod
     environment:
       POSTGRES_DB: keycloak
       POSTGRES_USER: keycloak

frontend/Caddyfile

@@ -55,11 +55,29 @@
 
         reverse_proxy @websockets backend:5000
 
+        # Admin API: proxy /admin/* to backend, except SPA sub-paths (callback, creator)
+        @admin_api {
+            path {$VITE_BASE_ROUTE}/admin/*
+            not path {$VITE_BASE_ROUTE}/admin/callback {$VITE_BASE_ROUTE}/admin/callback/*
+            not path {$VITE_BASE_ROUTE}/admin/creator {$VITE_BASE_ROUTE}/admin/creator/*
+        }
+
+        reverse_proxy @admin_api backend:5000 {
+            trusted_proxies 0.0.0.0/0
+            header_up Host {upstream_hostport}
+            header_up X-Forwarded-Host {host}
+        }
+
          # Required for SPA router to work
         @spa_router {
             not path {$VITE_BASE_ROUTE}/demo/* {$VITE_BASE_ROUTE}/server/* {$VITE_BASE_ROUTE}/agent/ready {$VITE_BASE_ROUTE}/public/* {$VITE_BASE_ROUTE}/qr
+            not {
+                path {$VITE_BASE_ROUTE}/admin/*
+                not path {$VITE_BASE_ROUTE}/admin/callback {$VITE_BASE_ROUTE}/admin/callback/*
+                not path {$VITE_BASE_ROUTE}/admin/creator {$VITE_BASE_ROUTE}/admin/creator/*
+            }
             file {
-                try_files {path} /index.html
+                try_files {path} {$VITE_BASE_ROUTE}/index.html
             }
         }
         rewrite @spa_router {http.matchers.file.relative}