services:
  app:
    image: openldap:2.6.14
    environment:
      LDAP_ROOTDN: ${LDAP_ROOTDN}
      LDAP_BASE_DN: ${LDAP_BASE_DN}
      #LDAP_ROOTDN: ${LDAP_ROOTDN:-cn=admin,dc=ldap,dc=lainoa,dc=eus}
      LDAP_ROOTPW: ${LDAP_ROOTPW}
      LDAP_FQDN: ldap.lainoa.eus
      LDAP_DN_ATTR: cn
      LDAP_ORGANIZATION: wproject
      LDAP_READONLY_USER: "true"
      LDAP_READONLY_USER_USERNAME: ${LDAP_READONLY_USER_USERNAME}
      LDAP_READONLY_USER_PASSWORD: ${LDAP_READONLY_USER_PASSWORD}
    #hostname: openldap
    volumes:
      - ./data:/var/lib/openldap/openldap-data
      - ./data/prepopulate:/etc/openldap/prepopulate:ro
      - ./certs:/etc/ssl/openldap:ro 
    ports:
      - ${PORT_OPENLDAP:-389}:389
      - ${PORT_OPENLDAP_SSL:-636}:636
    secrets:
      - openldap-user-passwords
      
  phpldapadmin:
    image: phpldapadmin/phpldapadmin:latest
    environment:
      LDAP_HOST: app
      LDAP_BASE_DN: dc=ldap,dc=lainoa,dc=eus
      LDAP_USERNAME: cn=admin,dc=ldap,dc=lainoa,dc=eus
      LDAP_PASSWORD: ${LDAP_ROOTPW}
      #LDAP_LOGIN_ATTR: dn
      LDAP_LOGIN_ATTR: uid
      LDAP_LOGIN_OBJECTCLASS: simpleSecurityObject
      LDAP_ALLOW_GUEST: "FALSE"
      LDAP_ALERT_ROOTDN: "TRUE"
    ports:
      - "8080:8080"
    depends_on:
      - app
      
secrets:
  openldap-user-passwords:
    file: ./secrets/passwords.txt