fix: docker-compose.env.example & README.md to work out of the box

refs KK-1379

Author: karisal-anders

README.md

@@ -15,7 +15,7 @@
     - [Installing Python requirements](#installing-python-requirements)
     - [Database](#database)
     - [Notification import](#notification-import)
-  - [Daily running, Debugging](#daily-running-debugging)
+    - [Daily running, Debugging](#daily-running-debugging)
   - [Keeping Python requirements up to date](#keeping-python-requirements-up-to-date)
   - [Code linting & formatting](#code-linting--formatting)
   - [Pre-commit hooks](#pre-commit-hooks)
@@ -95,7 +95,7 @@ If you do not have a super user / admin to administrate the API yet, you can cre
 - `docker compose run django python manage.py add_admin_user -u admin -p admin -e admin@example.com`
   - In case you don't have a running container yet
 
-The project is now running at http://localhost:8081
+The project is now running at http://localhost:8081 and using public Keycloak test environment for authentication.
 
 ### Development without Docker
 

docker-compose.env.example

@@ -5,8 +5,17 @@ DEBUG=1
 DATABASE_URL=postgres://kukkuu:kukkuu@localhost:5434/kukkuu
 CORS_ALLOWED_ORIGINS=http://localhost:3000,http://localhost:3001,http://localhost:3002
 CORS_ORIGIN_ALLOW_ALL=True
-# TOKEN_AUTH_AUTHSERVER_URL=https://tunnistamo.test.kuva.hel.ninja/openid
-TOKEN_AUTH_AUTHSERVER_URL=http://tunnistamo-backend:8000/openid
+# For Keycloak test environment authentication service:
+TOKEN_AUTH_AUTHSERVER_URL=https://tunnistus.test.hel.ninja/auth/realms/helsinki-tunnistus
+# For local Tunnistamo authentication service:
+# TOKEN_AUTH_AUTHSERVER_URL=http://tunnistamo-backend:8000/openid
+TOKEN_AUTH_ACCEPTED_AUDIENCE=kukkuu-api-dev,profile-api-test
+TOKEN_AUTH_ACCEPTED_SCOPE_PREFIX=
+TOKEN_AUTH_REQUIRE_SCOPE_PREFIX=False
+GDPR_API_QUERY_SCOPE=gdprquery
+GDPR_API_DELETE_SCOPE=gdprdelete
+GDPR_API_AUTHORIZATION_FIELD=authorization.permissions.scopes
+HELUSERS_BACK_CHANNEL_LOGOUT_ENABLED=True
 KUKKUU_HASHID_SALT=ULGd5YeRv6yVtvoj
 KUKKUU_TICKET_VERIFICATION_URL=http://localhost:3000/ticket-verification-endpoint/{reference_id}
 MAIL_MAILGUN_KEY=