services: {% include 'roles/docker-oauth2-proxy/templates/container.yml.j2' %} application: image: bitnami/openldap:{{ applications[application_id].version }} container_name: {{ applications[application_id].hostname }} {% include 'roles/docker-compose/templates/services/base.yml.j2' %} {% if applications[application_id].network.public | bool %} ports: - 127.0.0.1:{{ports.localhost.ldap.ldap}}:{{ldap_docker_port}} # Expose just on localhost so that nginx stream proxy can use it {% endif %} volumes: - 'data:/bitnami/openldap' - '{{ldif_host_path}}:{{ldif_docker_path}}:ro' # Mounting all ldif files for import healthcheck: test: > bash -c ' ldapsearch -x -H ldap://localhost:{{ ldap_docker_port }} \ -D "{{ ldap.dn.administrator }}" -w "{{ ldap.bind_credential }}" -b "{{ ldap.dn.root }}" > /dev/null \ && ldapsearch -Y EXTERNAL -H ldapi:/// \ -b cn=config "(&(objectClass=olcOverlayConfig)(olcOverlay=memberof))" \ | grep "olcOverlay:" | grep -q "memberof" ' {% include 'templates/docker/container/networks.yml.j2' %} {% include 'templates/docker/compose/volumes.yml.j2' %} data: {% include 'templates/docker/compose/networks.yml.j2' %}