podman commit

2026-09-12 15:55:31 +02:00
commit fe36c1a45e
23 changed files with 1521 additions and 0 deletions
@@ -0,0 +1,33 @@
+[Unit]
+Description=OPENLDAP Server
+After=network-online.target ldap-network.service
+Wants=network-online.target
+
+[Container]
+Image=localhost/openldap:2.6.14
+
+ContainerName=ldap-server
+NetworkAlias=server
+Network=ldap.network
+
+PublishPort=389:389
+PublishPort=636:636
+#- ${PORT_OPENLDAP:-389}:389
+#- ${PORT_OPENLDAP_SSL:-636}:636
+
+Volume=%h/podman/ldap-pla/certs:/etc/ssl/openldap:ro
+Volume=%h/podman/ldap-pla/data:/var/lib/openldap/openldap-data
+Volume=%h/podman/ldap-pla/data/prepopulate:/etc/openldap/prepopulate:ro
+
+#add ldap server host if needed
+#AddHost=ldap.example.com:x.x.x.x
+
+EnvironmentFile=%h/.config/containers/systemd/ldap.env
+Secret=openldap-user-passwords
+LogDriver=journald
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=default.target
@@ -0,0 +1,9 @@
+LDAP_ROOTDN=cn=admin,dc=ldap,dc=example,dc=com
+LDAP_BASE_DN=cn=admin,dc=ldap,dc=example,dc=com
+LDAP_ROOTPW=root_pwd
+LDAP_READONLY_USER=true
+LDAP_READONLY_USER_USERNAME=readonly
+LDAP_READONLY_USER_PASSWORD=readonly_pwd
+LDAP_FQDN=ldap.example.com
+LDAP_DN_ATTR=cn
+LDAP_ORGANIZATION=organization_name
@@ -0,0 +1,2 @@
+[Network]
+Driver=bridge
@@ -0,0 +1,33 @@
+[Unit]
+Description=PhpLdapAdmin
+After=ldap.service
+Requires=ldap.service
+
+[Container]
+Image=docker.io/phpldapadmin/phpldapadmin:latest
+
+ContainerName=pla
+
+Network=ldap.network
+
+#PublishPort=8080:8080
+PublishPort=0.0.0.0:8080:8080
+
+Environment=LDAP_HOST=ldap-server
+Environment=LDAP_BASE_DN="dc=ldap,dc=lainoa,dc=eus"
+Environment=LDAP_USERNAME="cn=admin,dc=ldap,dc=lainoa,dc=eus"
+#Environment=LDAP_PASSWORD=${LDAP_ROOTPW}
+#Environment=LDAP_LOGIN_ATTR=dn
+Environment=LDAP_LOGIN_ATTR=uid
+Environment=LDAP_LOGIN_OBJECTCLASS=simpleSecurityObject
+Environment=LDAP_ALLOW_GUEST=false
+Environment=LDAP_ALERT_ROOTDN=true
+Environment=SERVER_NAME=:8080
+#EnvironmentFile=%h/.config/containers/systemd/ldap.env
+EnvironmentFile=%h/.config/containers/systemd/pla.env
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=default.target
@@ -0,0 +1 @@
+LDAP_PASSWORD=ldap_admin_pwd