{
  "aio_services_v1": [
    {
      "container_name": "nextcloud-aio-lldap",
      "display_name": "Light LDAP implementation",
      "documentation": "https://github.com/nextcloud/all-in-one/tree/main/community-containers/lldap",
      "image": "lldap/lldap",
      "image_tag": "v0-alpine",
      "internal_port": "17170",
      "restart": "unless-stopped",
      "ports": [
        {
          "ip_binding": "%APACHE_IP_BINDING%",
          "port_number": "17170",
          "protocol": "tcp"
        }
      ],
      "environment": [
        "TZ=%TIMEZONE%",
        "UID=65534",
        "GID=65534",
        "LLDAP_JWT_SECRET=%LLDAP_JWT_SECRET%",
        "LLDAP_LDAP_USER_PASS=%LLDAP_LDAP_USER_PASS%",
        "LLDAP_LDAP_BASE_DN=%NC_BASE_DN%"
      ],
      "secrets": [
        "LLDAP_JWT_SECRET",
        "LLDAP_LDAP_USER_PASS"
      ],
      "ui_secret": "LLDAP_JWT_SECRET",
      "volumes": [
        {
          "source": "nextcloud_aio_lldap",
          "destination": "/data",
          "writeable": true
        }
      ],
      "backup_volumes": [
        "nextcloud_aio_lldap"
      ],
      "nextcloud_exec_commands": [
        "php /var/www/html/occ app:install user_ldap",
        "php /var/www/html/occ app:enable user_ldap",
        "CONF_NAME=$(php /var/www/html/occ ldap:create-empty-config -p)",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapAgentPassword             '%LLDAP_LDAP_USER_PASS%'",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapAdminGroup                lldap_admin",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapAgentName                 'cn=admin,ou=people,%NC_BASE_DN%'",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapBase                      '%NC_BASE_DN%'",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapHost                      'ldap://nextcloud-aio-lldap'",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapPort                      3890",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapTLS                       0",
        "php /var/www/html/occ ldap:set-config $CONF_NAME turnOnPasswordChange          0",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapBaseUsers                 'ou=people,%NC_BASE_DN%'",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapEmailAttribute            mail",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapGidNumber                 gidNumber",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapLoginFilter               '(&(|(objectclass=person))(|(uid=%uid)(|(mailPrimaryAddress=%uid)(mail=%uid))))'",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapLoginFilterEmail          1",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapLoginFilterUsername       1",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapUserAvatarRule            default",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapUserDisplayName           cn",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapUserFilter                '(|(objectclass=person))'",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapUserFilterMode            0",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapUserFilterObjectclass     person",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapBaseGroups                'ou=groups,%NC_BASE_DN%'",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapGroupDisplayName          cn",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapGroupFilter               '(&(|(objectclass=groupOfUniqueNames)))'",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapGroupFilterMode           0",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapGroupFilterObjectclass    groupOfUniqueNames",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapGroupMemberAssocAttr      uniqueMember",
        "php /var/www/html/occ ldap:set-config $CONF_NAME useMemberOfToDetectMembership 1",
        "php /var/www/html/occ ldap:set-config $CONF_NAME ldapConfigurationActive       1"
      ]
    }
  ]
}