services:
  openldap:
    image: osixia/openldap:latest
    container_name: openldap
    hostname: openldap
    restart: "always"
    ports: 
      - "389:389"
      - "636:636"
    volumes:
      - ./data/certs:/container/service/slapd/assets/certs
      - ./data/ldap:/var/lib/ldap
      - ./data/config:/etc/ldap/slapd.d
    environment: 
      - LDAP_ORGANISATION={{ domain_lvl_2 }}
      - LDAP_DOMAIN={{ domain_lvl_2 }}.{{ domain_lvl_1 }}
      - LDAP_ADMIN_USERNAME= {{ admin_username }}
      - LDAP_ADMIN_PASSWORD={{ admin_pass }}
      - LDAP_CONFIG_PASSWORD={{ config_pass }}
      - "LDAP_BASE_DN=dc={{ domain_lvl_2 }},dc={{ domain_lvl_1 }}"
      - LDAP_TLS_CRT_FILENAME=ldap.crt
      - LDAP_TLS_KEY_FILENAME=ldap.key
      - LDAP_TLS_CA_CRT_FILENAME=RootCA.crt
      - LDAP_READONLY_USER=true
      - LDAP_READONLY_USER_USERNAME={{ ro_username }}
      - LDAP_READONLY_USER_PASSWORD={{ ro_pass }}
    networks:
      - openldap

  phpldapadmin:
    image: osixia/phpldapadmin:latest
    container_name: phpldapadmin
    hostname: phpldapadmin
    restart: "always"
    ports: 
      - "80:80"
    environment: 
      - PHPLDAPADMIN_LDAP_HOSTS=openldap
      - PHPLDAPADMIN_TRUST_PROXY_SSL=true
      - PHPLDAPADMIN_HTTPS=false
    depends_on:
      - openldap
    networks:
      - openldap

  haproxy:
    image: haproxy:2.3
    container_name: haproxy
    ports:
      - 443:443
    volumes:
    - ./haproxy/conf/haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro
    - ./haproxy/ssl:/usr/local/etc/ssl:ro
    networks:
      - openldap
    depends_on:
    - phpldapadmin

networks:
  openldap:
    driver: bridge