prepare ldap for multiserver (#169)

* add multi-server attributes to ldif * add example compose file for a multiserver * add readme * add script for database creation within the existing database instance * add generation of admin.pem * add own certificate for kopano_server_2 * add admin.pem to compose (only for multiserver) * add spooler for 2nd node * add link to ldap demo readme
2026-08-11 16:32:59 +00:00 · 2019-10-16 22:39:15 +02:00
parent b004988517
commit b3c7d702be
8 changed files with 204 additions and 4 deletions
@@ -0,0 +1,15 @@
+# Configuration example for running Kopano in a Multiserver setup
+
+This example shows how a Kopano Multiserver/Distributed setup can be achieved. The design is by no means perfect (a real deployment could make use of zero user/cachine nodes to handle front facing components), but its functional. Users will be able to login to Kopano WebApp as well as Meet and see users of other nodes and will be able to mail/call with them.
+
+**Hint:** The configuration as it is requires that you clean out existing Kopano containers and data volumes, as the additional database is only created on the initial start of the database container.
+
+1. Add the `kopano-multiserver.yml` to the `COMPOSE_FILE` variable in your `.env` file.
+
+Example:
+
+```bash
+COMPOSE_FILE=docker-compose.yml:docker-compose.ports.yml:examples/kopano-multiserver/kopano-multiserver.yml
+```
+
+2. run `docker-compose up -d` from the root of this project.
@@ -0,0 +1,95 @@
+version: "3.5"
+
+services:
+  db:
+    volumes:
+      - ./database/create-additional-databases.sh:/docker-entrypoint-initdb.d/create-additional-databases.sh
+    environment:
+      - MYSQL_ADDITIONAL_DATABASES=${MYSQL_DATABASE}2
+
+  kopano_server:
+    environment:
+      - KCCONF_SERVER_SERVER_NAME=kopano_server
+      - KCCONF_SERVER_ENABLE_DISTRIBUTED_KOPANO=true
+      - KCCONF_ADMIN_SSLKEY_FILE=/kopano/ssl/admin.pem
+
+  kopano_server_2:
+    image: ${docker_repo:-zokradonh}/kopano_core:${CORE_VERSION:-latest}
+    hostname: kopano_server_2
+    container_name: ${COMPOSE_PROJECT_NAME}_server_2
+    depends_on:
+      - db
+      - ldap
+      - kopano_ssl
+      - kopano_konnect
+    environment:
+      - SERVICE_TO_START=server
+      - TZ=${TZ}
+      - KCCONF_SERVER_COREDUMP_ENABLED=no
+      - KCCONF_SERVER_MYSQL_HOST=${MYSQL_HOST}
+      - KCCONF_SERVER_MYSQL_PORT=3306
+      - KCCONF_SERVER_MYSQL_DATABASE=${MYSQL_DATABASE}2
+      - KCCONF_SERVER_MYSQL_USER=${MYSQL_USER}
+      - KCCONF_SERVER_MYSQL_PASSWORD=${MYSQL_PASSWORD}
+      - KCCONF_SERVER_SERVER_SSL_KEY_FILE=/kopano/ssl/kopano_server_2.pem
+      - KCCONF_SERVER_SERVER_SSL_CA_FILE=/kopano/ssl/ca.pem
+      - KCCONF_SERVER_SERVER_NAME=kopano_server_2
+      - KCCONF_SERVER_SSLKEYS_PATH=/kopano/ssl/clients
+      - KCCONF_SERVER_PROXY_HEADER=* # delete line if webapp is not behind reverse proxy
+      - KCCONF_SERVER_SYSTEM_EMAIL_ADDRESS=${POSTMASTER_ADDRESS}
+      - KCCONF_LDAP_LDAP_URI=${LDAP_SERVER}
+      - KCCONF_LDAP_LDAP_BIND_USER=${LDAP_BIND_DN}
+      - KCCONF_LDAP_LDAP_BIND_PASSWD=${LDAP_BIND_PW}
+      - KCCONF_LDAP_LDAP_SEARCH_BASE=${LDAP_SEARCH_BASE}
+      - KCUNCOMMENT_LDAP_1=${KCUNCOMMENT_LDAP_1}
+      - KCCOMMENT_LDAP_1=${KCCOMMENT_LDAP_1}
+      - ADDITIONAL_KOPANO_PACKAGES=${ADDITIONAL_KOPANO_PACKAGES}
+      - KCCONF_SERVER_ENABLE_SSO=yes
+      - KCCONF_SERVER_KCOIDC_ISSUER_IDENTIFIER=https://${FQDN}
+      - KCCONF_SERVER_KCOIDC_INSECURE_SKIP_VERIFY=${INSECURE}
+      - KCCONF_SERVER_ENABLE_DISTRIBUTED_KOPANO=true
+      - KCCONF_ADMIN_SSLKEY_FILE=/kopano/ssl/admin.pem
+    env_file:
+      - kopano_server.env
+    networks:
+      - kopano-net
+      - ldap-net
+      - web-net
+    volumes:
+      - kopanodata2/:/kopano/data
+      - kopanossl/:/kopano/ssl
+      - kopanosocket2/:/run/kopano
+
+  kopano_spooler_2:
+    image: ${docker_repo:-zokradonh}/kopano_core:${CORE_VERSION:-latest}
+    restart: unless-stopped
+    hostname: spooler_2
+    container_name: ${COMPOSE_PROJECT_NAME}_spooler_2
+    domainname: ${LDAP_DOMAIN}
+    depends_on:
+      - kopano_server_2
+      - mail
+    volumes:
+      - kopanossl/:/kopano/ssl
+      - kopanosocket2/:/run/kopano
+    environment:
+      - SERVICE_TO_START=spooler
+      - TZ=${TZ}
+      - KCCONF_SPOOLER_LOG_LEVEL=3
+      - KCCONF_SPOOLER_SMTP_SERVER=mail
+      - KCCONF_SPOOLER_SSLKEY_FILE=/kopano/ssl/kopano_spooler.pem
+    env_file:
+      - kopano_spooler.env
+    networks:
+      - kopano-net
+
+  kopano_scheduler:
+    depends_on:
+      - kopano_server_2
+    environment:
+      - TZ=${TZ}
+      - CRON_KOPANOUSERS2=10 * * * * docker exec kopano_server_2 kopano-admin --sync
+
+volumes:
+  kopanodata2:
+  kopanosocket2: