Skip to content
Snippets Groups Projects
Commit f551b44b authored by Christian Elberfeld's avatar Christian Elberfeld
Browse files

LDAP Replikation

parent a8db2547
No related branches found
No related tags found
No related merge requests found
......@@ -7,8 +7,7 @@ services:
image: osixia/openldap:1.3.0
restart: always
command: --loglevel debug
# hostname: {{ inventory_hostname }}-sync
network_mode: host
hostname: {{ inventory_hostname }}-sync
extra_hosts:
- "webserver-sync{% if inventory_hostname == "webserver" %}-dummy{% endif %}:{{ hostvars['webserver'].int_ip4 }}"
- "warpsrvint-sync{% if inventory_hostname == "warpsrvint" %}-dummy{% endif %}:{{ hostvars['warpsrvint'].int_ip4 }}"
......@@ -16,12 +15,11 @@ services:
volumes:
- /srv/ldap/database:/var/lib/ldap
- /srv/ldap/config:/etc/ldap/slapd.d
# ports:
# - {{ int_ip4 }}:389:389
# - {{ int_ip4 }}:636:636
ports:
- {{ int_ip4 }}:389:389
- {{ int_ip4 }}:636:636
environment:
- HOSTNAME={{ int_ip4 }}
# - HOSTNAME={{ inventory_hostname }}-sync
- HOSTNAME={{ inventory_hostname }}-sync
- LDAP_BACKEND=hdb
- LDAP_ORGANISATION={{ ldap_org }}
- LDAP_DOMAIN={{ ldap_domain }}
......@@ -32,8 +30,8 @@ services:
- LDAP_READONLY_USER_PASSWORD={{ ldap_readonly_pass }}
- LDAP_TLS_VERIFY_CLIENT=never
- LDAP_REPLICATION=false
# - LDAP_REPLICATION=true
# - LDAP_REPLICATION_HOSTS=#PYTHON2BASH:['ldap://webserver-sync','ldap://warpsrvint-sync','ldap://verwaltung-sync']
- LDAP_REPLICATION=true
- LDAP_REPLICATION_HOSTS=#PYTHON2BASH:['ldap://webserver-sync','ldap://warpsrvint-sync','ldap://verwaltung-sync']
phpldapadmin:
image: osixia/phpldapadmin:0.9.0
......@@ -43,18 +41,17 @@ services:
ports:
- 127.0.0.1:42004:80
environment:
- PHPLDAPADMIN_LDAP_HOSTS={{ int_ip4 }}
# - PHPLDAPADMIN_LDAP_HOSTS=openldap
- PHPLDAPADMIN_LDAP_HOSTS=openldap
- PHPLDAPADMIN_HTTPS=false
- PHPLDAPADMIN_TRUST_PROXY_SSL=true
# syncreplexporter:
# build: .
# image: "syncreplexporter--{{ ansible_date_time.date }}--{{ ansible_date_time.hour }}-{{ ansible_date_time.minute }}-{{ ansible_date_time.second }}"
# restart: always
# depends_on:
# - openldap
# volumes:
# - /srv/ldap/syncrepl_exporter.yml:/syncrepl_exporter.yml
# ports:
# - {{ int_ip4 }}:9328:9328
syncreplexporter:
build: .
image: "syncreplexporter--{{ ansible_date_time.date }}--{{ ansible_date_time.hour }}-{{ ansible_date_time.minute }}-{{ ansible_date_time.second }}"
restart: always
depends_on:
- openldap
volumes:
- /srv/ldap/syncrepl_exporter.yml:/syncrepl_exporter.yml
ports:
- {{ int_ip4 }}:9328:9328
......@@ -26,7 +26,7 @@
- { role: common/borgserver, tags: borgserver }
- { role: common/docker, tags: docker }
- { role: common/telegraf, tags: telegraf }
# - { role: common/docker_ldap, tags: ldap }
- { role: common/docker_ldap, tags: ldap }
- { role: common/nginx, tags: nginx }
- { role: warpsrvint/docker_grafana, tags: grafana }
- { role: warpsrvint/docker_influx, tags: influx }
......@@ -80,7 +80,7 @@
- { role: common/docker, tags: docker }
- { role: common/nginx, tags: nginx }
- { role: common/openvpn, tags: openvpn }
# - { role: common/docker_ldap, tags: ldap }
- { role: common/docker_ldap, tags: ldap }
- { role: verwaltung/docker_gitea, tags: gitea }
- { role: verwaltung/docker_nextcloud, tags: nextcloud }
- { role: verwaltung/docker_mysql, tags: mysql }
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment