services:
  ldap-account-manager:
    container_name: lam
    build:
      context: .
    image: ghcr.io/ldapaccountmanager/lam:9.6
    restart: unless-stopped
    ports:
      - ${COMPOSE_PORT_HTTP:-8080}:8080
    volumes:
      - lamconfig:/var/lib/ldap-account-manager/config
      - lammainconfig:/etc/ldap-account-manager
    environment:
      - LAM_SKIP_PRECONFIGURE=${LAM_SKIP_PRECONFIGURE:-true}
      - LAM_PASSWORD=${LAM_PASSWORD}
      - LAM_LANG=${LAM_LANG}
      - LDAP_SERVER=${LDAP_SERVER}
      - LDAP_DOMAIN=${LDAP_DOMAIN}
      - LDAP_BASE_DN=${LDAP_BASE_DN}
      - LDAP_USER=cn=admin,${LDAP_BASE_DN}
      - LDAP_USERS_DN=${LDAP_USERS_DN}
      - LDAP_GROUPS_DN=${LDAP_GROUPS_DN}
      - DEBUG=true
      # Custom
      - LAM_CONFIGURATION_DATABASE=mysql
      - LAM_CONFIGURATION_HOST=pg01.lan
      - LAM_CONFIGURATION_PORT=3306
      - LAM_CONFIGURATION_USER=lam
      - LAM_CONFIGURATION_PASSWORD=lam
      - LAM_CONFIGURATION_DATABASE_NAME=lam

    hostname: ldap-account-manager
  ldap:
    image: osixia/openldap:latest
    container_name: ldap
    restart: unless-stopped
    ports:
      - "389:389"
      - "636:636"
    environment:
      - LDAP_ORGANISATION=${LDAP_ORGANISATION}
      - LDAP_DOMAIN=${LDAP_DOMAIN}
      - LDAP_BASE_DN=${LDAP_BASE_DN}
      - LDAP_ADMIN_PASSWORD=${LDAP_ADMIN_PASSWORD}
      - LDAP_READONLY_USER=true
      - LDAP_READONLY_USER_PASSWORD=${LDAP_READONLY_USER_PASSWORD}
      - LDAP_TLS_CRT_FILENAME=ldap.crt
      - LDAP_TLS_KEY_FILENAME=ldap.key
      - LDAP_TLS_CA_CRT_FILENAME=ca.crt
      - LDAP_TLS_VERIFY_CLIENT=never

    command: "--loglevel info --copy-service"
    volumes:
      - ldap:/var/lib/ldap
      - slapd:/etc/ldap/slapd.d
      - certs:/container/service/slapd/assets/certs
    hostname: ldap

volumes:
  lamconfig:
  lammainconfig:
  ldap:
  slapd:
  certs: