docker-compose/lldap/docker-compose.yml.j2

@@ -6,7 +6,7 @@ services:
     pull_policy: missing
     ports:
       - "3890:3890"
-      # - "17170:17170" # front-end; ueber traefik
+      - "17170:17170" # front-end; ueber traefik # auskommentieren wenn fertig
     volumes:
       - "lldap_data:/data"
       - "./lldap_config.toml:/data/lldap_config.toml"
@@ -16,15 +16,15 @@ services:
       - traefik
       - postfix
       - internal
-    labels:
+    # labels:
-      traefik.enable: true
+    #   traefik.enable: true
-      traefik.http.routers.lldap.service: lldap
+    #   traefik.http.routers.lldap.service: lldap
-      traefik.http.routers.lldap.priority: "10"
+    #   traefik.http.routers.lldap.priority: "10"
-      traefik.http.routers.lldap.rule: Host(`ldap.mgrote.net`)
+    #   traefik.http.routers.lldap.rule: Host(`ldap.mgrote.net`)
-      traefik.http.routers.lldap.tls: true
+    #   traefik.http.routers.lldap.tls: true
-      traefik.http.routers.lldap.tls.certresolver: resolver_letsencrypt
+    #   traefik.http.routers.lldap.tls.certresolver: resolver_letsencrypt
-      traefik.http.routers.lldap.entrypoints: entry_https
+    #   traefik.http.routers.lldap.entrypoints: entry_https
-      traefik.http.services.lldap.loadbalancer.server.port: 17170
+    #   traefik.http.services.lldap.loadbalancer.server.port: 17170
     #healthcheck: # https://github.com/lldap/lldap/issues/18389
     #  test: ["CMD", "mc", "ready", "local"]
     #  interval: 5s
@@ -56,6 +56,7 @@ networks:
     external: true
   postfix:
     external: true
+  internal:
 
 ######## Volumes ########
 volumes:
@@ -63,4 +64,8 @@ volumes:
   db17:
 
 # todo heatclheck
-# rolle in friedhof
+# rolle in friedho
+# munin url
+# chedckliste
+# backups pve/pbs löschen
+# depends_on

docker-compose/lldap/lldap_config.toml.j2

@@ -20,7 +20,7 @@ key_seed = "{{ lookup('viczem.keepass.keepass', 'lldap/lldap_key_seed', 'passwor
 
 [smtp_options]
 enable_password_reset=false
-server=postfix
+server = "postfix"
 port = 25
 smtp_encryption = "NONE"
 reply_to  ="Do not reply <info@mgrote.net>"