services:
  lldap:
    image: lldap/lldap:stable
    ports:
      # For LDAP, not recommended to expose, see Usage section.
      #- "3890:3890"
      # For LDAPS (LDAP Over SSL), enable port if LLDAP_LDAPS_OPTIONS__ENABLED set true, look env below
      #- "6360:6360"
      # For the web front-end
      - "17170:17170"
    volumes:
      - "/data/nfs/Baxter/Docker/lldap:/data"
      # Alternatively, you can mount a local folder
      # - "./lldap_data:/data"
    networks:
      - netgrimoire
    environment:
      - TZ=America/Chicago
      - PGID=1001
      - PUID=999 
      - UMASK=002
      - LLDAP_JWT_SECRET=F@lcon13
      - LLDAP_KEY_SEED=1qaz@WSX1qaz@WSX
      - LLDAP_LDAP_BASE_DN=dc=pncharris,dc=com
      # If using LDAPS, set enabled true and configure cert and key path
      # - LLDAP_LDAPS_OPTIONS__ENABLED=true
      # - LLDAP_LDAPS_OPTIONS__CERT_FILE=/path/to/certfile.crt
      # - LLDAP_LDAPS_OPTIONS__KEY_FILE=/path/to/keyfile.key
      # You can also set a different database:
      # - LLDAP_DATABASE_URL=mysql://mysql-user:password@mysql-server/my-database
      # - LLDAP_DATABASE_URL=postgres://postgres-user:password@postgres-server/my-database
    deploy:
      labels:
        - homepage.group=Management
        - homepage.name=LLDAP
        - homepage.icon=lldap.png
        - homepage.href=http://auth.netgrimoire.com
        - homepage.description=Account Manager
        - caddy=auth.netgrimoire.com
        - caddy.reverse_proxy="{{upstreams 17170}}"

networks:
  netgrimoire:
    external: true