mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-24 11:06:24 +02:00
Kevin Veen-Birkenbach
208848579d
- Add handlers/main.yml to load memberof/refint modules and import groups via docker exec - Use OPENLDAP_CONTAINER consistently (replace OPENLDAP_NAME) - Rename tasks/ldifs_creation.yml -> tasks/_ldifs_creation.yml and update includes - Drop default param from get_app_conf calls; add explicit meta: flush_handlers - docker-compose: honor OPENLDAP_NETWORK_EXPOSE_LOCAL | bool; minor formatting - env template: formatting/comments consistency - Remove unused 01_rbac_group.ldif.j2; rename 02_rbac_roles -> 01_rbac_roles and fix filter to LDAP - vars: rename OPENLDAP_NAME -> OPENLDAP_CONTAINER; prune LDIF schema type Conversation: https://chatgpt.com/share/68d1d25d-e788-800f-bfb6-13b1f5bc6121
29 lines
1.2 KiB
Django/Jinja
29 lines
1.2 KiB
Django/Jinja
{% include 'roles/docker-compose/templates/base.yml.j2' %}
|
|
|
|
application:
|
|
image: "{{ OPENLDAP_IMAGE }}:{{ OPENLDAP_VERSION }}"
|
|
container_name: "{{ OPENLDAP_CONTAINER }}"
|
|
{% include 'roles/docker-container/templates/base.yml.j2' %}
|
|
{% if OPENLDAP_NETWORK_EXPOSE_LOCAL | bool %}
|
|
ports:
|
|
- 127.0.0.1:{{ports.localhost.ldap['svc-db-openldap']}}:{{ OPENLDAP_DOCKER_PORT_OPEN }}
|
|
{% endif %}
|
|
volumes:
|
|
- 'data:/bitnami/openldap'
|
|
- '{{ OPENLDAP_LDIF_PATH_HOST }}:{{ OPENLDAP_LDIF_PATH_DOCKER }}:ro'
|
|
healthcheck:
|
|
test: >
|
|
bash -c '
|
|
ldapsearch -x -H ldap://localhost:{{ OPENLDAP_DOCKER_PORT_OPEN }} \
|
|
-D "{{ LDAP.DN.ADMINISTRATOR.DATA }}" -w "{{ LDAP.BIND_CREDENTIAL }}" -b "{{ LDAP.DN.ROOT }}" > /dev/null \
|
|
&& ldapsearch -Y EXTERNAL -H ldapi:/// \
|
|
-b cn=config "(&(objectClass=olcOverlayConfig)(olcOverlay=memberof))" \
|
|
| grep "olcOverlay:" | grep -q "memberof"
|
|
'
|
|
{% include 'roles/docker-container/templates/networks.yml.j2' %}
|
|
|
|
{% include 'roles/docker-compose/templates/volumes.yml.j2' %}
|
|
data:
|
|
name: "{{ OPENLDAP_VOLUME }}"
|
|
|
|
{% include 'roles/docker-compose/templates/networks.yml.j2' %} |