kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-08-29 15:06:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

Solved cert bugs

Browse Source
This commit is contained in:
Kevin Veen-Birkenbach
2025-01-21 18:18:18 +01:00
parent 3f0f666d25
commit b9c51d29ae
9 changed files with 40 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
roles/docker-ldap/tasks/main.yml
View File

@@ -2,7 +2,6 @@
- name: "include docker/compose/common.yml"
include_tasks: docker/compose/common.yml
# optimize
- name: "include tasks nginx-docker-proxy-domain.yml"
include_tasks: nginx-docker-proxy-domain.yml

4
roles/docker-ldap/templates/docker-compose.yml.j2
View File

@@ -35,10 +35,10 @@ services:
LDAP_LDAPS_PORT_NUMBER: 636 # Port used for TLS secure traffic. Priviledged port is supported (e.g. 636). Default: 1636 (non privileged port).
LDAP_TLS_CERT_FILE: /certs/cert.pem # File containing the certificate file for the TLS traffic. No defaults.
LDAP_TLS_KEY_FILE: /certs/key.pem # File containing the key for certificate. No defaults.
#LDAP_TLS_CA_FILE: # File containing the CA of the certificate. No defaults.
LDAP_TLS_CA_FILE: /certs/chain.pem # File containing the CA of the certificate. No defaults.
#LDAP_TLS_DH_PARAMS_FILE: # File containing the DH parameters. No defaults.
volumes:
- {{cert_mount_directory}}:/certs
- {{cert_mount_directory}}:/certs:ro
- 'data:/bitnami/openldap'
{% include 'templates/docker/container/networks.yml.j2' %}
{% include 'templates/docker/compose/volumes.yml.j2' %}

7
roles/docker-ldap/vars/main.yml
View File

@@ -1,3 +1,4 @@
docker_compose_project_name: "ldap"
ldap_root: "dc={{primary_domain_sld}},dc={{primary_domain_tld}}"
ldap_admin_dm: "cn={{ldap_administrator_username}},{{ldap_root}}"
docker_compose_project_name: "ldap"
ldap_root: "dc={{primary_domain_sld}},dc={{primary_domain_tld}}"
ldap_admin_dn: "cn={{ldap_administrator_username}},{{ldap_root}}"
cert_mount_directory: "{{docker_compose_instance_directory}}/certs/"