[Unit]
Description=Prosody XMPP Server
After=network-online.target prosody-pro-network.service
Wants=network-online.target

[Container]
Image=localhost/prosody/xmpp:0.12.5

ContainerName=prosody-server
NetworkAlias=server
Network=prosody-pro.network

PublishPort=5000:5000
PublishPort=5222:5222
PublishPort=5223:5223
PublishPort=5269:5269
PublishPort=5281:5281

Volume=%h/podman/prosody-pro/certs:/usr/local/etc/prosody/certs
Volume=%h/podman/prosody-pro/data:/usr/local/var/lib/prosody
Volume=%h/podman/prosody-pro/extras/firewall:/usr/local/etc/prosody/firewall

#add ldap server host if needed
AddHost=ldap.example.com:x.x.x.x

Environment=DOMAIN=example.com
Environment=DOMAIN_PROXY=proxy65.example.com
Environment=E2E_POLICY_MUC=optional
Environment=E2E_POLICY_WHITELIST=admin@example.com,whitlisted_group@conference.example.com
Environment=SPAM_BLOCKLIST=custom-blocklist.pfw
Environment=LOG_LEVEL=debug
Environment=PROSODY_ADMINS=admin@example.com
#LDAP setup
Environment=AUTHENTICATION=ldap
Environment=LDAP_BASE=ou=groups,dc=ldap,dc=example,dc=com
Environment=LDAP_SERVER=ldap.example.com:389
Environment=LDAP_ROOTDN=cn=readonly,dc=ldap,dc=example,dc=com
Environment=LDAP_PASSWORD=passw0rd
Environment=LDAP_MODE=bind
Environment=LDAP_SCOPE=subtree
Environment=LDAP_FILTER=(uid=$user)
Environment=LDAP_TLS=true
Environment=ALLOW_REGISTRATION=false

[Service]
Restart=always

[Install]
WantedBy=default.target