services:
  lldap:
    image: lldap/lldap:v0.6.1-debian-rootless
    container_name: lldap
    restart: unless-stopped
    pull_policy: missing
    ports:
      - "3890:3890"
      - "17170:17170" # front-end
    volumes:
      - "lldap_data:/data"
      - "./lldap_config.toml:/data/lldap_config.toml"
    environment:
      TZ: Europe/Berlin
    networks:
      - traefik
      - postfix
      - internal
    depends_on:
      - lldap-db17

######## Postgres ########
  lldap-db17:
    container_name: "lldap-db"
    image: "postgres:17.2"
    restart: unless-stopped
    pull_policy: missing
    environment:
      POSTGRES_USER: lldap
      POSTGRES_PASSWORD: "{{ lookup('viczem.keepass.keepass', 'lldap/lldap_db_pass', 'password') }}"
      TZ: Europe/Berlin
    volumes:
      - db17:/var/lib/postgresql/data
    networks:
      - internal
    healthcheck:
      test: ["CMD", "pg_isready", "-U", "lldap"]
      interval: 10s
      start_period: 30s

######## Networks ########
networks:
  traefik:
    external: true
  postfix:
    external: true
  internal:

######## Volumes ########
volumes:
  lldap_data:
  db17: