[Unit]
Description=OPENLDAP Server
After=network-online.target ldap-network.service
Wants=network-online.target

[Container]
Image=localhost/openldap:2.6.14

ContainerName=ldap-server
NetworkAlias=server
Network=ldap.network

PublishPort=389:389
PublishPort=636:636
#- ${PORT_OPENLDAP:-389}:389
#- ${PORT_OPENLDAP_SSL:-636}:636

Volume=%h/podman/ldap-pla/certs:/etc/ssl/openldap:ro
Volume=%h/podman/ldap-pla/data:/var/lib/openldap/openldap-data
Volume=%h/podman/ldap-pla/data/prepopulate:/etc/openldap/prepopulate:ro

#add ldap server host if needed
#AddHost=ldap.example.com:x.x.x.x

EnvironmentFile=%h/.config/containers/systemd/ldap.env
Secret=openldap-user-passwords
LogDriver=journald

[Service]
Restart=always

[Install]
WantedBy=default.target