services:
  ldap-server:
    image: osixia/openldap:1.5.0

    environment:
      - LDAP_ORGANISATION=Local Company
      - LDAP_DOMAIN=company.local

      - LDAP_ADMIN_PASSWORD=${LDAP_ADMIN_PASSWORD}
      - LDAP_CONFIG_PASSWORD=${LDAP_CONFIG_PASSWORD}

      - LDAP_TLS=false

      - LDAP_READONLY_USER=true
      - LDAP_READONLY_USER_USERNAME=${LDAP_READONLY_USER_USERNAME}
      - LDAP_READONLY_USER_PASSWORD=${LDAP_READONLY_USER_PASSWORD}
    volumes:
      # bootstrap
      - ./bootstrap-ldif:/container/service/slapd/assets/config/bootstrap/ldif/custom:ro
      # database
      - ../data/ldap-server-db:/var/lib/ldap:rw
      - ../data/ldap-server-config:/etc/ldap/slapd.d:rw

    command:
      - "--copy-service"  # do not modify bootstrap file

    restart: unless-stopped

  ldap-passwd-webui:
    build: ./ldap-passwd-webui

    environment:
      - LDAP_BIND_DN=cn=${LDAP_READONLY_USER_USERNAME},dc=company,dc=local
      - LDAP_BIND_PASSWORD=${LDAP_READONLY_USER_PASSWORD}
    volumes:
      - ./config/ldap-passwd-settings.ini:/opt/ldap-passwd-webui/settings.ini:ro

    restart: unless-stopped