#!/usr/bin/env sh
set -eu

rendered="$(docker compose config --format json)"
printf '%s\n' "$rendered" | jq -e '
  (.services.keycloak.ports[] | .host_ip == "127.0.0.1" and .target == 8080)
  and
  (.services.app.ports[] | .host_ip == "127.0.0.1" and .target == 8081)
  and
  (.networks["keycloak-net"].driver == "bridge")
' >/dev/null

./scripts/verify-internal-spa-no-google-contract.sh
echo "Single-EC2 local-identity topology verified"