48 lines
2.4 KiB
YAML
48 lines
2.4 KiB
YAML
# stack LLDAP
|
|
|
|
services:
|
|
lldap:
|
|
image: lldap/lldap:stable
|
|
restart: unless-stopped
|
|
ports:
|
|
# For LDAP, not recommended to expose, see Usage section.
|
|
- "3890:3890"
|
|
# For LDAPS (LDAP Over SSL), enable port if LLDAP_LDAPS_OPTIONS__ENABLED set true, look env below
|
|
#- "6360:6360"
|
|
# For the web front-end
|
|
- "17170:17170"
|
|
volumes:
|
|
- "/data/lldap/data:/data"
|
|
# Alternatively, you can mount a local folder
|
|
# - "./lldap_data:/data"
|
|
environment:
|
|
- UID=0
|
|
- GID=0
|
|
- TZ=Europe/Paris
|
|
- LLDAP_JWT_SECRET=t!hlRdlc4)TJ914Glj!Q9<5M^10Pg!52
|
|
- LLDAP_KEY_SEED=a8tC1hM[&WAV+=L[(*]q=plm!wAn/D0x
|
|
- LLDAP_LDAP_BASE_DN=dc=lexformatique,dc=fr
|
|
- LLDAP_LDAP_USER_PASS=Admin69* # If the password contains '$', escape it (e.g. Pas$$word sets Pas$word)
|
|
# If using LDAPS, set enabled true and configure cert and key path
|
|
# - LLDAP_LDAPS_OPTIONS__ENABLED=true
|
|
# - LLDAP_LDAPS_OPTIONS__CERT_FILE=/path/to/certfile.crt
|
|
# - LLDAP_LDAPS_OPTIONS__KEY_FILE=/path/to/keyfile.key
|
|
# You can also set a different database:
|
|
# - LLDAP_DATABASE_URL=mysql://mysql-user:password@mysql-server/my-database
|
|
# - LLDAP_DATABASE_URL=postgres://postgres-user:password@postgres-server/my-database
|
|
# If using SMTP, set the following variables
|
|
# - LLDAP_SMTP_OPTIONS__ENABLE_PASSWORD_RESET=true
|
|
# - LLDAP_SMTP_OPTIONS__SERVER=smtp.example.com
|
|
# - LLDAP_SMTP_OPTIONS__PORT=465 # Check your smtp provider's documentation for this setting
|
|
# - LLDAP_SMTP_OPTIONS__SMTP_ENCRYPTION=TLS # How the connection is encrypted, either "NONE" (no encryption, port 25), "TLS" (sometimes called SSL, port 465) or "STARTTLS" (sometimes called TLS, port 587).
|
|
# - LLDAP_SMTP_OPTIONS__USER=no-reply@example.com # The SMTP user, usually your email address
|
|
# - LLDAP_SMTP_OPTIONS__PASSWORD=PasswordGoesHere # The SMTP password
|
|
# - LLDAP_SMTP_OPTIONS__FROM=no-reply <no-reply@example.com> # The header field, optional: how the sender appears in the email. The first is a free-form name, followed by an email between <>.
|
|
# - LLDAP_SMTP_OPTIONS__TO=admin <admin@example.com> # Same for reply-to, optional.
|
|
networks:
|
|
- 001-stack-npm_nginx-proxy
|
|
# Pas de ports exposés : accès uniquement via NPM
|
|
|
|
networks:
|
|
001-stack-npm_nginx-proxy:
|
|
external: true # Réseau créé par NPM |