hetzner/server/ldap/docker-compose.yml

services:
  ldap:
    image: osixia/openldap:1.4.0
    container_name: ldap_ldap
    restart: unless-stopped
    hostname: pione.odamus.com
    environment:
      KEEP_EXISTING_CONFIG: "true"
      LDAP_ORGANISATION: "Odamus LDAP"
      LDAP_TLS_CRT_FILENAME: "ldap.odamus.com/ldap.odamus.com.cer"
      LDAP_TLS_KEY_FILENAME: "ldap.odamus.com/ldap.odamus.com.key"
      LDAP_TLS_CA_CRT_FILENAME: "ldap.odamus.com/ca.cer"
      LDAP_TLS_DH_PARAM_FILENAME: "ldap.odamus.com/fullchain.cer"
      LDAP_DOMAIN: myface.ph
      LDAP_ADMIN_PASSWORD: "n6FypB2oNA8WrkDyadyX"
      LDAP_CONFIG_PASSWORD: "Xyo6GN1OA9v3izhI7ESP"
      LDAP_TLS_ENFORCE: "true"
      LDAP_TLS_VERIFY_CLIENT: try
      LDAP_REPLICATION: "true"
      LDAP_REPLICATION_HOSTS: "#PYTHON2BASH:['ldap://pione.odamus.com', 'ldap://ldap.odamus.com']"
    volumes:
      - ldap_ldap-bootstrap:/container/service/slapd/assets/config/bootstrap/ldif/custom
      - ldap_ldap-certificates:/container/service/slapd/assets/certs
      - ldap_ldap-database:/var/lib/ldap
      - ldap_ldap-config:/etc/ldap/slapd.d
      - /etc/localtime:/etc/localtime
      - ldap_backups:/srv/backups
    ports:
      - "389:389"
      - "636:636"
    command: --copy-service
    networks:
      - ldap-net

  admin:
    image: osixia/phpldapadmin:0.9.0
    container_name: ldap_admin
    restart: unless-stopped
    hostname: ldapadmin.odamus.com
    environment:
      - PHPLDAPADMIN_HTTPS=false
      - PHPLDAPADMIN_LDAP_HOSTS=ldap1
    volumes:
      - ldap_admin-asserts-config:/container/service/phpldapadmin/assets/config
      - ldap_admin:/var/www/phpldapadmin
      - /etc/localtime:/etc/localtime
      - ldap_backups:/srv/backups
    ports:
      - "8082:80"
    networks:
      - ldap-net
      - traefik-network
    labels:
      - "traefik.enable=true"
      - traefik.docker.network=traefik-network
      - traefik.constraint-label=traefik-network
      - traefik.http.routers.ldap-admin-http.middlewares=http-to-https
      - traefik.http.routers.ldap-admin-https.rule=Host(`ldapadmin.odamus.com`)
      - traefik.http.routers.ldap-admin-https.entrypoints=websecure
      - traefik.http.routers.ldap-admin-http.rule=Host(`ldapadmin.odamus.com`)
      - traefik.http.routers.ldap-admin-http.entrypoints=web
      - "traefik.http.routers.ldap-admin-https.tls.certresolver=mychallenge"
      - traefik.http.services.ldap-admin.loadbalancer.server.port=80

  openldap:
    image: osixia/openldap-backup:1.4.0
    container_name: ldap_openldap
    restart: unless-stopped
    command: --loglevel debug
    environment:
      LDAP_BACKUP_CONFIG_CRON_EXP: "30 23 * * *"
      LDAP_BACKUP_DATA_CRON_EXP: "30 23 * * *"
      LDAP_BACKUP_TTL: 7
      LDAP_ORGANISATION: "Odamus Ltd"
      LDAP_DOMAIN: myface.ph
      LDAP_ADMIN_PASSWORD: "n6FypB2oNA8WrkDyadyX"
    volumes:
      - ldap_backups:/data/backup
      - ldap_slapd-data:/var/lib/ldap
      - ldap_slapd-config:/etc/ldap/slapd.d
      - /etc/localtime:/etc/localtime
    networks:
      - ldap-net

  ssp:
    image: dtwardow/ldap-self-service-password
    container_name: ldap_ssp
    restart: unless-stopped
    environment:
      - LDAP_URL=ldap.odamus.com
      - LDAP_STARTTLS=false
      - LDAP_USER=cn=admin,dc=myface,dc=ph
      - LDAP_PORT=389
      - LDAP_BASE=ou=users,dc=myface,dc=ph
      - LDAP_PASS=n6FypB2oNA8WrkDyadyX
      - LDAP_AD_MODE=false
      - SMTP_HOST=mail.odamus.com
      - SMTP_PORT=587
      - SMTP_USER=bounce@odamus.com
      - SMTP_PASS=8n9oQdXO2fr9Tt59wefr
      - SMTP_FROM=bounce@odamus.com
    volumes:
      - ldap_ssp-lssp.d:/usr/share/self-service-password/conf/conf.d
      - /etc/localtime:/etc/localtime
      - ldap_backups:/srv/backups
    ports:
      - "8081:80"
    networks:
      - ldap-net
      - traefik-network
    labels:
      - "traefik.enable=true"
      - traefik.docker.network=traefik-network
      - traefik.constraint-label=traefik-network
      - traefik.http.routers.ldap-ssp-http.middlewares=http-to-https
      - traefik.http.routers.ldap-ssp-https.rule=Host(`ssp.odamus.com`)
      - traefik.http.routers.ldap-ssp-https.entrypoints=websecure
      - traefik.http.routers.ldap-ssp-http.rule=Host(`ssp.odamus.com`)
      - traefik.http.routers.ldap-ssp-http.entrypoints=web
      - "traefik.http.routers.ldap-ssp-https.tls.certresolver=mychallenge"
      - traefik.http.services.ldap-ssp.loadbalancer.server.port=80

  ldap-nginx:
    image: nginx:latest
    container_name: ldap_ldap-nginx
    restart: unless-stopped
    volumes:
      - /etc/localtime:/etc/localtime
      - ldap_html:/usr/share/nginx/html
      - ldap_backups:/srv/backups
      - ./configs/my_nginx_conf:/etc/nginx/conf.d/default.conf:ro
      - ./configs/nginx_conf:/etc/nginx/nginx.conf:ro
    networks:
      - ldap-net
      - traefik-network
    labels:
      - "traefik.enable=true"
      - traefik.docker.network=traefik-network
      - traefik.constraint-label=traefik-network
      - traefik.http.routers.ldap-http.rule=Host(`ldap.odamus.com`)
      - traefik.http.routers.ldap-http.entrypoints=web
      - traefik.http.services.ldap.loadbalancer.server.port=80

volumes:
  ldap_ldap-bootstrap:
    external: true
  ldap_ldap-certificates:
    external: true
  ldap_ldap-database:
    external: true
  ldap_ldap-config:
    external: true
  ldap_backups:
    external: true
  ldap_admin-asserts-config:
    external: true
  ldap_admin:
    external: true
  ldap_slapd-data:
    external: true
  ldap_slapd-config:
    external: true
  ldap_ssp-lssp.d:
    external: true
  ldap_html:
    external: true

networks:
  ldap-net:
    name: ldap-net
  traefik-network:
    external: true