mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-29 15:06:26 +02:00
In between commit refactoring LDAP, to continue working on other computer
This commit is contained in:
@@ -213,38 +213,35 @@ defaults_applications:
|
||||
css_enabled: "{{css_enabled_default}}" # Enables\Disables Global CSS Style
|
||||
landingpage_iframe_enabled: false # Disabled by default, because it leads to authentification problems
|
||||
|
||||
# LDAP Account Manager
|
||||
lam:
|
||||
version: "latest"
|
||||
# administrator_password: "{{users.administrator.initial_password}}" # CHANGE for security reasons
|
||||
ldap:
|
||||
enabled: True # Should have the same value as applications.ldap.network.local.
|
||||
oauth2_proxy:
|
||||
enabled: true # Activate the OAuth2 Proxy for the LDAP Webinterface
|
||||
application: application # Needs to be the same as webinterface
|
||||
port: 80 # application port
|
||||
# cookie_secret: None # Set via openssl rand -hex 16
|
||||
matomo_tracking_enabled: "{{matomo_tracking_enabled_default}}" # Enables\Disables Matomo Tracking
|
||||
css_enabled: "{{css_enabled_default}}" # Enables\Disables Global CSS Style
|
||||
landingpage_iframe_enabled: "{{landingpage_iframe_enabled_default}}" # Enables\Disables the possibility to embed this on landing page via iframe
|
||||
|
||||
## LDAP
|
||||
ldap:
|
||||
lam:
|
||||
version: "latest"
|
||||
administrator_password: "{{users.administrator.initial_password}}" # CHANGE for security reasons
|
||||
openldap:
|
||||
version: "latest"
|
||||
network:
|
||||
local: True # Activates local network to allow other docker containers to connect
|
||||
public: False # Set to true in inventory file if you want to expose the LDAP port to the internet
|
||||
hostname: "openldap" # Hostname of the LDAP Server in the central_ldap network
|
||||
phpldapadmin:
|
||||
version: "2.0.0-dev" # @todo Attention: Change this as fast as released to latest
|
||||
version: "latest"
|
||||
network:
|
||||
local: True # Activates local network to allow other docker containers to connect
|
||||
public: False # Set to true in inventory file if you want to expose the LDAP port to the internet
|
||||
hostname: "openldap" # Hostname of the LDAP Server in the central_ldap network
|
||||
webinterface: "lam" # The webinterface which should be used. Possible: lam and phpldapadmin
|
||||
users:
|
||||
administrator:
|
||||
username: "{{users.administrator.username}}"
|
||||
ldap:
|
||||
enabled: True # Should have the same value as applications.ldap.openldap.network.local.
|
||||
oauth2_proxy:
|
||||
enabled: true # Activate the OAuth2 Proxy for the LDAP Webinterface
|
||||
application: lam # Needs to be the same as webinterface
|
||||
port: 80 # If you use phpldapadmin set it to 8080
|
||||
# cookie_secret: None # Set via openssl rand -hex 16
|
||||
database:
|
||||
central_storage: false # LDAP doesn't use an database in the current configuration. Propably a good idea to implement one later.
|
||||
# administrator_password: # CHANGE for security reasons in inventory file
|
||||
# administrator_database_password: # CHANGE for security reasons in inventory file
|
||||
force_import: False # Forces the import of the LDIF files
|
||||
matomo_tracking_enabled: "{{matomo_tracking_enabled_default}}" # Enables\Disables Matomo Tracking
|
||||
css_enabled: "{{css_enabled_default}}" # Enables\Disables Global CSS Style
|
||||
landingpage_iframe_enabled: "{{landingpage_iframe_enabled_default}}" # Enables\Disables the possibility to embed this on landing page via iframe
|
||||
|
||||
## Libre Office
|
||||
libreoffice:
|
||||
@@ -290,14 +287,14 @@ defaults_applications:
|
||||
|
||||
## Matomo
|
||||
matomo:
|
||||
version: "latest"
|
||||
version: "latest"
|
||||
oauth2_proxy:
|
||||
enabled: false # Deactivated atm. @todo implement
|
||||
# cookie_secret: None # Set via openssl rand -hex 16
|
||||
# database_password: Null # Needs to be set in inventory file
|
||||
# auth_token: Null # Needs to be set in inventory file
|
||||
enabled: false # Deactivated atm. @todo implement
|
||||
# cookie_secret: None # Set via openssl rand -hex 16
|
||||
# database_password: Null # Needs to be set in inventory file
|
||||
# auth_token: Null # Needs to be set in inventory file
|
||||
database:
|
||||
central_storage: True # Activate Central Database Storage
|
||||
central_storage: True # Activate Central Database Storage
|
||||
matomo_tracking_enabled: false # Activate in inventory file if you want to have the statistics, as soon as matomo is running
|
||||
css_enabled: false # Not optimized yet for matomo
|
||||
landingpage_iframe_enabled: "{{landingpage_iframe_enabled_default}}" # Enables\Disables the possibility to embed this on landing page via iframe
|
||||
@@ -653,6 +650,20 @@ defaults_applications:
|
||||
css_enabled: "{{ css_enabled_default }}" # Enables/Disables global CSS styling
|
||||
landingpage_iframe_enabled: "{{ landingpage_iframe_enabled_default }}" # Enables/Disables embedding via iframe
|
||||
|
||||
## phpLDAPadmin
|
||||
phpldapadmin:
|
||||
version: "2.0.0-dev" # @todo Attention: Change this as fast as released to latest
|
||||
ldap:
|
||||
enabled: True # Should have the same value as applications.ldap.network.local.
|
||||
oauth2_proxy:
|
||||
enabled: true # Activate the OAuth2 Proxy for the LDAP Webinterface
|
||||
application: application # Needs to be the same as webinterface
|
||||
port: 8080 # application port
|
||||
# cookie_secret: None # Set via openssl rand -hex 16
|
||||
matomo_tracking_enabled: "{{matomo_tracking_enabled_default}}" # Enables\Disables Matomo Tracking
|
||||
css_enabled: "{{css_enabled_default}}" # Enables\Disables Global CSS Style
|
||||
landingpage_iframe_enabled: "{{landingpage_iframe_enabled_default}}" # Enables\Disables the possibility to embed this on landing page via iframe
|
||||
|
||||
## PHPMyAdmin
|
||||
phpmyadmin:
|
||||
version: "latest" # Use the latest phpmyadmin version
|
||||
|
||||
@@ -2,62 +2,66 @@ ports:
|
||||
# Ports which are exposed to localhost
|
||||
localhost:
|
||||
web_socket:
|
||||
mastodon: 4001
|
||||
mastodon: 4001
|
||||
oauth2_proxy:
|
||||
phpmyadmin: 4181
|
||||
ldap: 4182
|
||||
openproject: 4183
|
||||
yourls: 4184
|
||||
pgadmin: 4185
|
||||
phpmyadmin: 4181
|
||||
lam: 4182
|
||||
openproject: 4183
|
||||
yourls: 4184
|
||||
pgadmin: 4185
|
||||
phpldapadmin: 4186
|
||||
fusiondirectory: 4187
|
||||
ldap:
|
||||
openldap: 389
|
||||
openldap: 389
|
||||
http:
|
||||
nextcloud: 8001
|
||||
gitea: 8002
|
||||
wordpress: 8003
|
||||
mediawiki: 8004
|
||||
mybb: 8005
|
||||
yourls: 8006
|
||||
mailu: 8007
|
||||
elk: 8008
|
||||
mastodon: 8009
|
||||
pixelfed: 8010
|
||||
peertube: 8011
|
||||
funkwhale: 8012
|
||||
roulette-wheel: 8013
|
||||
joomla: 8014
|
||||
attendize: 8015
|
||||
pgadmin: 8016
|
||||
baserow: 8017
|
||||
matomo: 8018
|
||||
listmonk: 8019
|
||||
discourse: 8020
|
||||
matrix_synapse: 8021
|
||||
matrix_element: 8022
|
||||
openproject: 8023
|
||||
gitlab: 8024
|
||||
akaunting: 8025
|
||||
moodle: 8026
|
||||
taiga: 8027
|
||||
friendica: 8028
|
||||
portfolio: 8029
|
||||
bluesky_api: 8030
|
||||
bluesky_web: 8031
|
||||
keycloak: 8032
|
||||
ldap: 8033
|
||||
phpmyadmin: 8034
|
||||
snipe_it: 8035
|
||||
sphinx: 8036
|
||||
bigbluebutton: 48087 # This port is predefined by bbb. @todo Try to change this to a 8XXX port
|
||||
nextcloud: 8001
|
||||
gitea: 8002
|
||||
wordpress: 8003
|
||||
mediawiki: 8004
|
||||
mybb: 8005
|
||||
yourls: 8006
|
||||
mailu: 8007
|
||||
elk: 8008
|
||||
mastodon: 8009
|
||||
pixelfed: 8010
|
||||
peertube: 8011
|
||||
funkwhale: 8012
|
||||
roulette-wheel: 8013
|
||||
joomla: 8014
|
||||
attendize: 8015
|
||||
pgadmin: 8016
|
||||
baserow: 8017
|
||||
matomo: 8018
|
||||
listmonk: 8019
|
||||
discourse: 8020
|
||||
matrix_synapse: 8021
|
||||
matrix_element: 8022
|
||||
openproject: 8023
|
||||
gitlab: 8024
|
||||
akaunting: 8025
|
||||
moodle: 8026
|
||||
taiga: 8027
|
||||
friendica: 8028
|
||||
portfolio: 8029
|
||||
bluesky_api: 8030
|
||||
bluesky_web: 8031
|
||||
keycloak: 8032
|
||||
lam: 8033
|
||||
phpmyadmin: 8034
|
||||
snipe_it: 8035
|
||||
sphinx: 8036
|
||||
phpldapadmin: 8037
|
||||
fusiondirectory: 8038
|
||||
bigbluebutton: 48087 # This port is predefined by bbb. @todo Try to change this to a 8XXX port
|
||||
# Ports which are exposed to the World Wide Web
|
||||
public:
|
||||
# The following ports should be changed to 22 on the subdomain via stream mapping
|
||||
ssh:
|
||||
gitea: 2201
|
||||
gitlab: 2202
|
||||
gitea: 2201
|
||||
gitlab: 2202
|
||||
ldaps:
|
||||
openldap: 636
|
||||
openldap: 636
|
||||
stun:
|
||||
bigbluebutton: 3478 # Not sure if it's right placed here or if it should be moved to localhost section
|
||||
bigbluebutton: 3478 # Not sure if it's right placed here or if it should be moved to localhost section
|
||||
turn:
|
||||
bigbluebutton: 5349 # Not sure if it's right placed here or if it should be moved to localhost section
|
||||
bigbluebutton: 5349 # Not sure if it's right placed here or if it should be moved to localhost section
|
||||
|
||||
@@ -72,6 +72,13 @@ defaults_networks:
|
||||
subnet: 192.168.102.208/28
|
||||
sphinx:
|
||||
subnet: 192.168.102.224/28
|
||||
lam:
|
||||
subnet: 192.168.103.0/28
|
||||
phpldapadmin:
|
||||
subnet: 192.168.103.16/28
|
||||
fusiondirectory:
|
||||
subnet: 192.168.103.32/28
|
||||
|
||||
# /24 Networks / 254 Usable Clients
|
||||
bigbluebutton:
|
||||
subnet: 10.7.7.0/24 # This variable does not have an impact. It's just there for documentation reasons, because this network is used in bbb
|
||||
|
||||
Reference in New Issue
Block a user