mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
kevinveenbirkenbachandClaude Opus 5
e550fad7e3
`|-` preserves the newlines that surround the `{% if %}` and `{% endif %}`
lines, so the rendered value carried leading and trailing whitespace instead
of a bare filter. An LDAP filter with leading whitespace is rejected by the
server, and Nextcloud answers with an empty user list rather than an error.
A double quoted scalar cannot hold a newline by construction. The branch is
unchanged: the full user filter when the user directory is enabled, `()`
otherwise.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
139 lines
5.5 KiB
YAML
139 lines
5.5 KiB
YAML
---
|
|
enabled: "{{ lookup('config', 'web-app-nextcloud', 'services.ldap.enabled') }}"
|
|
required: true
|
|
mechanism: plugin
|
|
source: upstream
|
|
bridges:
|
|
- ldap
|
|
update:
|
|
monitored: true
|
|
catalog: nextcloud-appstore
|
|
upstream_id: user_ldap
|
|
config:
|
|
user_directory:
|
|
enabled: true
|
|
plugin_configuration:
|
|
- appid: "user_ldap"
|
|
configkey: "background_sync_interval"
|
|
configvalue: 43200
|
|
- appid: "user_ldap"
|
|
configkey: "background_sync_offset"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "background_sync_prefix"
|
|
configvalue: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}"
|
|
- appid: "user_ldap"
|
|
configkey: "enabled"
|
|
configvalue: "yes"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}last_jpegPhoto_lookup"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_backup_port"
|
|
configvalue: "{{ lookup('config', 'svc-db-openldap', 'services.openldap.ports.local.ldap') }}"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_base"
|
|
configvalue: "{{ LDAP.DN.ROOT }}"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_base_groups"
|
|
configvalue: "{{ LDAP.DN.ROOT }}"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_base_users"
|
|
configvalue: "{{ LDAP.DN.OU.USERS }}"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_cache_ttl"
|
|
configvalue: 600
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_configuration_active"
|
|
configvalue: 1
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_connection_timeout"
|
|
configvalue: 15
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_display_name"
|
|
configvalue: "cn"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_dn"
|
|
configvalue: "{{ LDAP.DN.ADMINISTRATOR.DATA }}"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_email_attr"
|
|
configvalue: "mail"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_experienced_admin"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_gid_number"
|
|
configvalue: "gidNumber"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_group_display_name"
|
|
configvalue: "cn"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_group_filter"
|
|
configvalue: "(&(|(objectclass=groupOfUniqueNames)(objectclass=posixGroup)))"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_group_filter_mode"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_group_member_assoc_attribute"
|
|
configvalue: "uniqueMember"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_groupfilter_objectclass"
|
|
configvalue: "groupOfUniqueNames\nposixGroup"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_host"
|
|
configvalue: "{{ LDAP.SERVER.DOMAIN }}"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_login_filter"
|
|
configvalue: "{{ LDAP.FILTERS.USERS.LOGIN }}"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_login_filter_mode"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_loginfilter_email"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_loginfilter_username"
|
|
configvalue: 1
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_mark_remnants_as_disabled"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_matching_rule_in_chain_state"
|
|
configvalue: "unknown"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_nested_groups"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_paging_size"
|
|
configvalue: 500
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_port"
|
|
configvalue: 389
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_turn_off_cert_check"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_turn_on_pwd_change"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_user_avatar_rule"
|
|
configvalue: "default"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_user_filter_mode"
|
|
configvalue: 0
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_userfilter_objectclass"
|
|
configvalue: "inetOrgPerson"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_userlist_filter"
|
|
configvalue: "{{ LDAP.FILTERS.USERS.ALL if lookup('config', 'web-app-nextcloud', 'addons.user_ldap.config.user_directory.enabled') else '()' }}"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}use_memberof_to_detect_membership"
|
|
configvalue: 1
|
|
- appid: "user_ldap"
|
|
configkey: "types"
|
|
configvalue: "authentication"
|
|
- appid: "user_ldap"
|
|
configkey: "{{ NEXTCLOUD_LDAP_CONFIG_PREFIX }}ldap_expert_username_attr"
|
|
configvalue: "{{ LDAP.USER.ATTRIBUTES.ID }}"
|