mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-08 03:07:14 +02:00
Kevin Veen-Birkenbach
4f8ce598a9
- Add ALLOWED_PRIVATE_ADDRESSES to .env (from svc-db-postgres) to handle 422 Mastodon::PrivateNetworkAddressError - Switch docker-compose to MASTODON_* variables and align vars/main.yml - Always run 01_setup.yml during deployment (removed conditional flag) - OpenLDAP: remove implicit True default on network.local to avoid unintended truthy behavior Context: chess.infinito.nexus resolved to 192.168.200.30 (private IP) from Mastodon; targeted allowlist unblocks federation lookups. Ref: https://chat.openai.com/share/REPLACE_WITH_THIS_CONVERSATION_LINK
24 lines
1.5 KiB
YAML
24 lines
1.5 KiB
YAML
application_id: "svc-db-openldap"
|
|
|
|
# LDAP Variables
|
|
openldap_docker_port_secure: 636
|
|
openldap_docker_port_open: 389
|
|
openldap_server_uri: "ldap://127.0.0.1:{{ ports.localhost.ldap[application_id] }}"
|
|
openldap_bind_dn: "{{ LDAP.DN.ADMINISTRATOR.CONFIGURATION }}"
|
|
openldap_bind_pw: "{{ applications | get_app_conf(application_id, 'credentials.administrator_password', True) }}"
|
|
|
|
# LDIF Variables
|
|
openldap_ldif_host_path: "{{ docker_compose.directories.volumes }}ldif/"
|
|
openldap_ldif_docker_path: "/tmp/ldif/"
|
|
openldap_ldif_types:
|
|
- configuration
|
|
- groups
|
|
- schema # Don't know if this is still needed, it's now setup via tasks
|
|
|
|
openldap_name: "{{ applications | get_app_conf(application_id, 'docker.services.openldap.name', True) }}"
|
|
openldap_image: "{{ applications | get_app_conf(application_id, 'docker.services.openldap.image', True) }}"
|
|
openldap_version: "{{ applications | get_app_conf(application_id, 'docker.services.openldap.version', True) }}"
|
|
openldap_volume: "{{ applications | get_app_conf(application_id, 'docker.volumes.data', True) }}"
|
|
openldap_network: "{{ applications | get_app_conf(application_id, 'docker.network', True) }}"
|
|
|
|
openldap_network_expose_local: "{{ applications | get_app_conf(application_id, 'network.public', True) | bool or applications | get_app_conf(application_id, 'network.local') | bool }}" |