61 lines
1.6 KiB
Django/Jinja
61 lines
1.6 KiB
Django/Jinja
services:
|
|
openldap:
|
|
image: osixia/openldap:latest
|
|
container_name: openldap
|
|
hostname: openldap
|
|
restart: "always"
|
|
ports:
|
|
- "389:389"
|
|
- "636:636"
|
|
volumes:
|
|
- ./data/certs:/container/service/slapd/assets/certs
|
|
- ./data/ldap:/var/lib/ldap
|
|
- ./data/config:/etc/ldap/slapd.d
|
|
environment:
|
|
- LDAP_ORGANISATION={{ domain_lvl_2 }}
|
|
- LDAP_DOMAIN={{ domain_lvl_2 }}.{{ domain_lvl_1 }}
|
|
- LDAP_ADMIN_USERNAME= {{ admin_username }}
|
|
- LDAP_ADMIN_PASSWORD={{ admin_pass }}
|
|
- LDAP_CONFIG_PASSWORD={{ config_pass }}
|
|
- "LDAP_BASE_DN=dc={{ domain_lvl_2 }},dc={{ domain_lvl_1 }}"
|
|
- LDAP_TLS_CRT_FILENAME=ldap.crt
|
|
- LDAP_TLS_KEY_FILENAME=ldap.key
|
|
- LDAP_TLS_CA_CRT_FILENAME=RootCA.crt
|
|
- LDAP_READONLY_USER=true
|
|
- LDAP_READONLY_USER_USERNAME={{ ro_username }}
|
|
- LDAP_READONLY_USER_PASSWORD={{ ro_pass }}
|
|
networks:
|
|
- openldap
|
|
|
|
phpldapadmin:
|
|
image: osixia/phpldapadmin:latest
|
|
container_name: phpldapadmin
|
|
hostname: phpldapadmin
|
|
restart: "always"
|
|
ports:
|
|
- "80:80"
|
|
environment:
|
|
- PHPLDAPADMIN_LDAP_HOSTS=openldap
|
|
- PHPLDAPADMIN_TRUST_PROXY_SSL=true
|
|
- PHPLDAPADMIN_HTTPS=false
|
|
depends_on:
|
|
- openldap
|
|
networks:
|
|
- openldap
|
|
|
|
haproxy:
|
|
image: haproxy:2.3
|
|
container_name: haproxy
|
|
ports:
|
|
- 443:443
|
|
volumes:
|
|
- ./haproxy/conf/haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro
|
|
- ./haproxy/ssl:/usr/local/etc/ssl:ro
|
|
networks:
|
|
- openldap
|
|
depends_on:
|
|
- phpldapadmin
|
|
|
|
networks:
|
|
openldap:
|
|
driver: bridge |