forked from data.coop/ansible
62 lines
1.7 KiB
YAML
62 lines
1.7 KiB
YAML
|
version: '3'
|
||
|
|
services:
|
||
|
|
openldap:
|
||
|
|
image: osixia/openldap:1.2.2
|
||
|
|
container_name: openldap
|
||
|
|
environment:
|
||
|
|
LDAP_LOG_LEVEL: "256"
|
||
|
|
LDAP_ORGANISATION: "data.coop"
|
||
|
|
LDAP_DOMAIN: "data.coop"
|
||
|
|
LDAP_BASE_DN: ""
|
||
|
|
LDAP_ADMIN_PASSWORD: "admin"
|
||
|
|
LDAP_CONFIG_PASSWORD: "config"
|
||
|
|
LDAP_READONLY_USER: "true"
|
||
|
|
LDAP_READONLY_USER_USERNAME: "readonly"
|
||
|
|
LDAP_READONLY_USER_PASSWORD: "readonly"
|
||
|
|
LDAP_RFC2307BIS_SCHEMA: "false"
|
||
|
|
LDAP_BACKEND: "mdb"
|
||
|
|
LDAP_TLS: "true"
|
||
|
|
LDAP_TLS_CRT_FILENAME: "ldap.crt"
|
||
|
|
LDAP_TLS_KEY_FILENAME: "ldap.key"
|
||
|
|
LDAP_TLS_CA_CRT_FILENAME: "ca.crt"
|
||
|
|
LDAP_TLS_ENFORCE: "false"
|
||
|
|
LDAP_TLS_CIPHER_SUITE: "SECURE256:-VERS-SSL3.0"
|
||
|
|
LDAP_TLS_PROTOCOL_MIN: "3.1"
|
||
|
|
LDAP_TLS_VERIFY_CLIENT: "demand"
|
||
|
|
LDAP_REPLICATION: "false"
|
||
|
|
KEEP_EXISTING_CONFIG: "false"
|
||
|
|
LDAP_REMOVE_CONFIG_AFTER_SETUP: "true"
|
||
|
|
LDAP_SSL_HELPER_PREFIX: "ldap"
|
||
|
|
tty: true
|
||
|
|
stdin_open: true
|
||
|
|
volumes:
|
||
|
|
- /var/lib/ldap
|
||
|
|
- /etc/ldap/slapd.d
|
||
|
|
- /container/service/slapd/assets/certs/
|
||
|
|
ports:
|
||
|
|
- "389:389"
|
||
|
|
- "636:636"
|
||
|
|
domainname: "ldap.data.coop" # important: same as hostname
|
||
|
|
hostname: "ldap.data.coop"
|
||
|
|
networks:
|
||
|
|
- external_services
|
||
|
|
|
||
|
|
phpldapadmin:
|
||
|
|
image: osixia/phpldapadmin:latest
|
||
|
|
container_name: phpldapadmin
|
||
|
|
environment:
|
||
|
|
PHPLDAPADMIN_LDAP_HOSTS: "openldap"
|
||
|
|
PHPLDAPADMIN_HTTPS: "false"
|
||
|
|
PHPLDAPADMIN_TRUST_PROXY_SSL: "true"
|
||
|
|
VIRTUAL_HOST: ldap.data.coop
|
||
|
|
LETSENCRYPT_HOST: ldap.data.coop
|
||
|
|
LETSENCRYPT_EMAIL: valberg@orn.li
|
||
|
|
depends_on:
|
||
|
|
- openldap
|
||
|
|
networks:
|
||
|
|
- external_services
|
||
|
|
|
||
|
|
networks:
|
||
|
|
external_services:
|
||
|
|
external: true
|