move optional containers into their own compose files (#246)

* move playground into its own compose file fixes #245 * move ldap-admin and ssp into their own directories fixes #244 * remove command for konnect from meet example
2026-08-22 05:42:54 +00:00 · 2019-09-18 07:30:54 +02:00
parent c50f952456
commit b60176ee93
8 changed files with 105 additions and 70 deletions
@@ -0,0 +1,26 @@
+# LDAP extras for kopano-docker
+
+This directory contains a compose file including optional containers.
+
+## How to use this compose file?
+
+ 1. Add the `ldap-extras.yml` to the `COMPOSE_FILE` variable in your `.env` file.
+
+ Example:
+```
+COMPOSE_FILE=docker-compose.yml:docker-compose.ports.yml:ldap-extras/ldap-extras.yml
+```
+
+ 2. Run `docker-compose up -d`.
+
+ ## ldap-admin
+
+After startup you can access phpLDAPadmin by going to `https://kopano.demo/ldap-admin`
+
+To login use the `cn=admin,$LDAP_BASE_DN` and `LDAP_BIND_PW` from the `.env` file.
+
+Check https://documentation.kopano.io/kopanocore_administrator_manual/user_management.html#user-management-from-openldap to learn more about Kopanos LDAP possibilities.
+
+## password-self-service
+
+After startup you can access [Self Service Password](https://ltb-project.org/documentation/self-service-password) by visiting `https://kopano.demo/password-reset/`.
@@ -0,0 +1,53 @@
+version: "3.5"
+
+services:
+  ldap-admin:
+    image: osixia/phpldapadmin:0.7.2
+    restart: unless-stopped
+    depends_on:
+      - ldap
+    environment:
+      - PHPLDAPADMIN_LDAP_HOSTS=ldap
+      - PHPLDAPADMIN_HTTPS=false
+    networks:
+      - ldap-net
+      - web-net
+
+  password-self-service:
+    image: tiredofit/self-service-password:3.0
+    restart: unless-stopped
+    domainname: ${LDAP_DOMAIN}
+    depends_on:
+      - ldap
+      - mail
+    environment:
+      - SSP_VERSION=1.3
+      - LDAP_SERVER=ldap://ldap:389
+      - LDAP_BINDDN=cn=admin,${LDAP_BASE_DN}
+      - LDAP_BINDPASS=${LDAP_ADMIN_PASSWORD}
+      - LDAP_BASE_SEARCH=${LDAP_BASE_DN}
+      - MAIL_FROM=noreply@${LDAP_DOMAIN}
+      - SMTP_HOST=mail
+      - SMTP_PORT=25
+      - SMTP_SECURE_TYPE=false
+      - SMTP_AUTOTLS=false
+      - QUESTIONS_ENABLED=false
+      - PASSWORD_NO_REUSE=true
+      - WHO_CAN_CHANGE_PASSWORD=user
+      - SECRETEKEY=${SELF_SERVICE_SECRETEKEY}
+      - BACKGROUND=.
+      - PASSWORD_MIN_LENGTH=${SELF_SERVICE_PASSWORD_MIN_LENGTH}
+      - PASSWORD_MAX_LENGTH=${SELF_SERVICE_PASSWORD_MAX_LENGTH}
+      - PASSWORD_MIN_LOWERCASE=${SELF_SERVICE_PASSWORD_MIN_LOWERCASE}
+      - PASSWORD_MIN_UPPERCASE=${SELF_SERVICE_PASSWORD_MIN_UPPERCASE}
+      - PASSWORD_MIN_DIGIT=${SELF_SERVICE_PASSWORD_MIN_DIGIT}
+      - PASSWORD_MIN_SPECIAL=${SELF_SERVICE_PASSWORD_MIN_SPECIAL}
+      - PASSWORD_HASH=CRYPT
+    env_file:
+      - password-self-service.env
+    expose:
+      - "80"
+    networks:
+      - web-net     # provide web-frontend
+      - ldap-net    # access ldap user base and write passwords
+      - kopano-net  # send mail directly to mailstack