computer-playbook/roles/docker-ldap/templates/docker-compose.yml.j2

services:
  phpldapadmin:
    image: leenooks/phpldapadmin:{{ldap_admin_version}}
    logging:
      driver: journald
    restart: {{docker_restart_policy}}
    ports:
      - 127.0.0.1:{{http_port}}:8080
    environment:
      # @See https://github.com/leenooks/phpLDAPadmin/wiki/Docker-Container
      APP_URL:    https://{{domain}}
      LDAP_HOST:  {{domain}}
  openldap:
    image: bitnami/openldap:{{ldap_version}}
    logging:
      driver: journald
    restart: {{docker_restart_policy}}
    ports:
      - '127.0.0.1:389:1389'  # Expose just on local host for security reasons
      - '636:636'             # Expose to internet
    environment:
      # @See https://hub.docker.com/r/bitnami/openldap

      # GENERAL
      LDAP_ADMIN_USERNAME:  {{ldap_administrator_username}} # LDAP database admin user.
      LDAP_ADMIN_PASSWORD:  {{ldap_administrator_password}} # LDAP database admin password.
      #LDAP_USERS:          user01,user02                   # Comma separated list of LDAP users to create in the default LDAP tree. Default: user01,user02
      #LDAP_PASSWORDS:      password1,password2             # Comma separated list of passwords to use for LDAP users. Default: bitnami1,bitnami 
      LDAP_ROOT:            {{ldap_root}}                   # LDAP baseDN (or suffix) of the LDAP tree. Default: dc=example,dc=org
      LDAP_ADMIN_DN:        {{ldap_admin_dn}}

      # TLS
      LDAP_ENABLE_TLS:          yes                         # Whether to enable TLS for traffic or not. Defaults to no
      LDAP_REQUIRE_TLS:         yes                         # Whether connections must use TLS. Will only be applied with LDAP_ENABLE_TLS active. Defaults to no
      LDAP_LDAPS_PORT_NUMBER:   636                         # Port used for TLS secure traffic. Priviledged port is supported (e.g. 636). Default: 1636 (non privileged port).
      LDAP_TLS_CERT_FILE:       /certs/cert.pem             # File containing the certificate file for the TLS traffic. No defaults.
      LDAP_TLS_KEY_FILE:        /certs/key.pem              # File containing the key for certificate. No defaults.
      LDAP_TLS_CA_FILE:         /certs/chain.pem            # File containing the CA of the certificate. No defaults.
      #LDAP_TLS_DH_PARAMS_FILE:                             # File containing the DH parameters. No defaults.
    volumes:
      - {{cert_mount_directory}}:/certs:ro
      - 'data:/bitnami/openldap'
{% include 'templates/docker/container/networks.yml.j2' %}
{% include 'templates/docker/compose/volumes.yml.j2' %}
  data:

{% include 'templates/docker/compose/networks.yml.j2' %}