default.yaml.startup 1.8 KB

1234567891011121314151617181920212223242526272829303132333435363738394041
  1. # This is the default image startup configuration file
  2. # this file define environment variables used during the container **first start** in **startup scripts**.
  3. # This file is deleted right after startup scripts are processed for the first time,
  4. # after that all theses values will not be available in the container environment.
  5. # That helps to keep your container configuration secret.
  6. # more information : https://github.com/osixia/docker-light-baseimage
  7. # Required and used for new ldap server only
  8. LDAP_ORGANISATION: Example Inc.
  9. LDAP_DOMAIN: example.org
  10. LDAP_ADMIN_PASSWORD: admin
  11. LDAP_CONFIG_PASSWORD: config
  12. LDAP_READONLY_USER: false
  13. LDAP_READONLY_USER_USERNAME: readonly
  14. LDAP_READONLY_USER_PASSWORD: readonly
  15. # Tls
  16. LDAP_TLS: true
  17. LDAP_TLS_CRT_FILENAME: ldap.crt
  18. LDAP_TLS_KEY_FILENAME: ldap.key
  19. LDAP_TLS_CA_CRT_FILENAME: ca.crt
  20. LDAP_TLS_CIPHER_SUITE: SECURE256:-VERS-SSL3.0
  21. LDAP_TLS_PROTOCOL_MIN: 3.1
  22. LDAP_TLS_VERIFY_CLIENT: demand
  23. # Replication
  24. LDAP_REPLICATION: false
  25. # variables $LDAP_BASE_DN, $LDAP_ADMIN_PASSWORD, $LDAP_CONFIG_PASSWORD
  26. # are automaticaly replaced at run time
  27. # if you want to add replication to an existing ldap
  28. # adapt LDAP_REPLICATION_CONFIG_SYNCPROV and LDAP_REPLICATION_HDB_SYNCPROV to your configuration
  29. # avoid using $LDAP_BASE_DN, $LDAP_ADMIN_PASSWORD and $LDAP_CONFIG_PASSWORD variables
  30. LDAP_REPLICATION_CONFIG_SYNCPROV: binddn="cn=admin,cn=config" bindmethod=simple credentials=$LDAP_CONFIG_PASSWORD searchbase="cn=config" type=refreshAndPersist retry="60 +" timeout=1 starttls=critical
  31. LDAP_REPLICATION_HDB_SYNCPROV: binddn="cn=admin,$LDAP_BASE_DN" bindmethod=simple credentials=$LDAP_ADMIN_PASSWORD searchbase="$LDAP_BASE_DN" type=refreshAndPersist interval=00:00:00:10 retry="60 +" timeout=1 starttls=critical
  32. LDAP_REPLICATION_HOSTS:
  33. - ldap://ldap.example.org # The order must be the same on all ldap servers
  34. - ldap://ldap2.example.org