mirror of
https://github.com/opencloud-eu/opencloud.git
synced 2026-05-03 01:09:54 -05:00
Viktor Scharf
7e9a7d8099
* ldap setup * run ldap in the opencloud full * set admin user * feat: use the shared LDAP schema and new phpldapadmin * chore: change dc to match opencloud domain --------- Co-authored-by: Michael Barz <michael.barz@zeitgestalten.eu>
63 lines
2.3 KiB
YAML
63 lines
2.3 KiB
YAML
---
|
|
services:
|
|
traefik:
|
|
networks:
|
|
opencloud-net:
|
|
|
|
opencloud:
|
|
environment:
|
|
# Ldap IDP specific configuration
|
|
OC_LDAP_URI: ldaps://ldap-server:1636
|
|
OC_LDAP_INSECURE: "true"
|
|
OC_LDAP_BIND_DN: "cn=admin,dc=opencloud,dc=eu"
|
|
OC_LDAP_BIND_PASSWORD: ${LDAP_ADMIN_PASSWORD:-admin}
|
|
OC_LDAP_GROUP_BASE_DN: "ou=groups,dc=opencloud,dc=eu"
|
|
OC_LDAP_GROUP_FILTER: "(objectclass=opencloudobject)"
|
|
OC_LDAP_GROUP_OBJECTCLASS: "groupOfNames"
|
|
OC_LDAP_USER_BASE_DN: "ou=users,dc=opencloud,dc=eu"
|
|
OC_LDAP_USER_FILTER: "(objectclass=openclouduser)"
|
|
OC_LDAP_USER_OBJECTCLASS: "inetOrgPerson"
|
|
LDAP_LOGIN_ATTRIBUTES: "uid"
|
|
OC_ADMIN_USER_ID: "f7fc96f6-ceb4-4387-bd69-07a6d7992973"
|
|
IDP_LDAP_LOGIN_ATTRIBUTE: "uid"
|
|
IDP_LDAP_UUID_ATTRIBUTE: "openclouduuid"
|
|
IDP_LDAP_UUID_ATTRIBUTE_TYPE: binary
|
|
GRAPH_LDAP_SERVER_WRITE_ENABLED: "true" # assuming the external ldap is writable
|
|
GRAPH_LDAP_REFINT_ENABLED: "true" # osixia has refint enabled.
|
|
# OC_RUN_SERVICES specifies to start all services except glauth, idm and accounts. These are replaced by external services
|
|
OC_EXCLUDE_RUN_SERVICES: idm
|
|
|
|
ldap-server:
|
|
image: bitnami/openldap:2.6
|
|
networks:
|
|
opencloud-net:
|
|
entrypoint: ["/bin/sh", "/opt/bitnami/scripts/openldap/docker-entrypoint-override.sh", "/opt/bitnami/scripts/openldap/run.sh" ]
|
|
environment:
|
|
BITNAMI_DEBUG: true
|
|
LDAP_TLS_VERIFY_CLIENT: never
|
|
LDAP_ENABLE_TLS: "yes"
|
|
LDAP_TLS_CA_FILE: /opt/bitnami/openldap/share/openldap.crt
|
|
LDAP_TLS_CERT_FILE: /opt/bitnami/openldap/share/openldap.crt
|
|
LDAP_TLS_KEY_FILE: /opt/bitnami/openldap/share/openldap.key
|
|
LDAP_ROOT: "dc=opencloud,dc=eu"
|
|
LDAP_ADMIN_PASSWORD: ${LDAP_ADMIN_PASSWORD:-admin}
|
|
ports:
|
|
- "127.0.0.1:389:1389"
|
|
- "127.0.0.1:636:1636"
|
|
volumes:
|
|
- ./config/ldap/ldif:/ldifs
|
|
- ../shared/config/ldap/schemas/10_opencloud_schema.ldif:/schemas/10_opencloud_schema.ldif
|
|
- ./config/ldap/docker-entrypoint-override.sh:/opt/bitnami/scripts/openldap/docker-entrypoint-override.sh
|
|
- ldap-certs:/opt/bitnami/openldap/share
|
|
- ldap-data:/bitnami/openldap
|
|
logging:
|
|
driver: ${LOG_DRIVER:-local}
|
|
restart: always
|
|
|
|
volumes:
|
|
ldap-certs:
|
|
ldap-data:
|
|
|
|
networks:
|
|
opencloud-net:
|