From 1aa665237868ffefa150542666b4ecb3db8b54c4 Mon Sep 17 00:00:00 2001
From: this-is-tobi <thibault_colin@hotmail.fr>
Date: Wed, 25 Oct 2023 12:08:17 +0200
Subject: [PATCH] feat: :lock: add keycloak password policy

---
 roles/keycloak/tasks/main.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/keycloak/tasks/main.yml b/roles/keycloak/tasks/main.yml
index eeac3734..9665aae0 100644
--- a/roles/keycloak/tasks/main.yml
+++ b/roles/keycloak/tasks/main.yml
@@ -157,6 +157,7 @@
     id: dso
     realm: dso
     display_name: Dso Realm
+    password_policy: "length(8) and lowerCase(1) and upperCase(1) and specialChars(1) and digits(1) and passwordHistory(1) and notUsername() and forceExpiredPasswordChange(365)"
     enabled: true
 
 - name: Get keycloak dso realm users from API