You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
71 lines
1.8 KiB
71 lines
1.8 KiB
# https://github.com/bitnami/bitnami-docker-openldap
|
|
# https://github.com/wheelybird/ldap-user-manager
|
|
# https://github.com/osixia/docker-openldap
|
|
# openssl x509 -outform der -in /etc/letsencrypt/local/_wildcard.kaz.local.pem -out /etc/letsencrypt/local/_wildcard.kaz.local.crt
|
|
# openssl pkey -in /etc/letsencrypt/local/_wildcard.kaz.local-key.pem -out /etc/letsencrypt/local/_wildcard.kaz.local.key
|
|
# apt install ldap-utils
|
|
# ldapsearch -x -H ldaps://kaz.local -D "cn=admin,dc=kaz,dc=local" -W
|
|
|
|
version: '2'
|
|
services:
|
|
|
|
web:
|
|
image: ltbproject/self-service-password
|
|
container_name: ${ldapUIName}
|
|
depends_on:
|
|
- ldap
|
|
networks:
|
|
- ldapNet
|
|
- postfixNet
|
|
links:
|
|
- ldap
|
|
external_links:
|
|
- ${smtpServName}:${smtpHost}
|
|
volumes:
|
|
- /etc/ssl:/etc/ssl:ro
|
|
- /usr/local/share/ca-certificates:/usr/local/share/ca-certificates:ro
|
|
- /etc/timezone:/etc/timezone:ro
|
|
- /root/mkcert:/root/mkcert:ro
|
|
- configSSP:/var/www/conf/
|
|
- icons:/var/www/html/images/
|
|
- lang:/var/www/lang/
|
|
|
|
ldap:
|
|
image: docker.io/bitnami/openldap:2.6
|
|
container_name: ${ldapServName}
|
|
restart: ${restartPolicy}
|
|
|
|
env_file:
|
|
- ../../secret/env-${ldapServName}
|
|
# ports:
|
|
# - 389:389
|
|
# - 636:636
|
|
environment:
|
|
- LDAP_ROOT=${ldap_root}
|
|
- LDAP_PORT_NUMBER=389
|
|
- LDAP_LDAPS_PORT_NUMBER=636
|
|
- LDAP_CONFIG_ADMIN_ENABLED=yes
|
|
- LDAP_SKIP_DEFAULT_TREE=yes
|
|
- LDAP_ENABLE_TLS=no
|
|
volumes:
|
|
- openldapData:/bitnami/openldap
|
|
#- ./ldifs:/ldifs:ro
|
|
- /etc/letsencrypt:/etc/letsencrypt:ro
|
|
- /etc/localtime:/etc/localtime:ro
|
|
- /etc/timezone:/etc/timezone:ro
|
|
networks:
|
|
- ldapNet
|
|
|
|
volumes:
|
|
openldapData:
|
|
configSSP:
|
|
icons:
|
|
lang:
|
|
|
|
networks:
|
|
ldapNet:
|
|
external: true
|
|
name: ldapNet
|
|
postfixNet:
|
|
external: true
|
|
name: postfixNet
|
|
|