all-in-one/community-containers/lldap/lldap.json

82 lines
4.6 KiB
JSON
Raw Normal View History

{
"aio_services_v1": [
{
"container_name": "nextcloud-aio-lldap",
"display_name": "Light LDAP implementation",
"documentation": "https://github.com/nextcloud/all-in-one/tree/main/community-containers/lldap",
"image": "lldap/lldap",
"image_tag": "v0-alpine",
"internal_port": "17170",
"restart": "unless-stopped",
"ports": [
{
"ip_binding": "%APACHE_IP_BINDING%",
"port_number": "17170",
"protocol": "tcp"
}
],
"environment": [
"TZ=%TIMEZONE%",
"UID=65534",
"GID=65534",
"LLDAP_JWT_SECRET=%LLDAP_JWT_SECRET%",
"LLDAP_LDAP_USER_PASS=%LLDAP_LDAP_USER_PASS%",
"LLDAP_LDAP_BASE_DN=%NC_BASE_DN%"
],
"secrets": [
"LLDAP_JWT_SECRET",
"LLDAP_LDAP_USER_PASS"
],
"ui_secret": "LLDAP_JWT_SECRET",
"volumes": [
{
"source": "nextcloud_aio_lldap",
"destination": "/data",
"writeable": true
}
],
"backup_volumes": [
"nextcloud_aio_lldap"
],
"nextcloud_exec_commands": [
"php /var/www/html/occ app:install user_ldap",
"php /var/www/html/occ app:enable user_ldap",
"CONF_NAME=$(php /var/www/html/occ ldap:create-empty-config -p)",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapHost 'ldap://nextcloud-aio-lldap'",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapPort 3890",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapAgentName 'uid=admin,ou=people,%NC_BASE_DN%'",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapAgentPassword '%LLDAP_LDAP_USER_PASS%'",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapBase '%NC_BASE_DN%'",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapBaseUsers '%NC_BASE_DN%'",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapBaseGroups '%NC_BASE_DN%'",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapConfigurationActive 1",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapLoginFilter '(&(objectclass=person)(uid=%uid))'",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapUserFilter '(&(objectclass=person))'",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapUserFilterMode 1",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapUserFilterObjectclass person",
"php /var/www/html/occ ldap:set-config $CONF_NAME turnOnPasswordChange 0",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapCacheTTL 600",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapExperiencedAdmin 0",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapGidNumber gidNumber",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapGroupFilter '(&(objectclass=groupOfUniqueNames))'",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapGroupFilterMode 0",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapGroupDisplayName cn",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapGroupFilterObjectclass groupOfUniqueNames",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapGroupMemberAssocAttr uniqueMember",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapEmailAttribute mail",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapLoginFilterEmail 0",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapLoginFilterUsername 1",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapMatchingRuleInChainState unknown",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapNestedGroups 0",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapPagingSize 500",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapTLS 0",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapUserAvatarRule default",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapUserDisplayName displayname",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapUuidGroupAttribute auto",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapUuidUserAttribute auto",
"php /var/www/html/occ ldap:set-config $CONF_NAME ldapExpertUsernameAttr uid"
]
}
]
}