{
  "kind": "compose",
  "metadata": {
    "name": "LLDAP",
    "description": "Lichtgewicht centrale gebruikersmap met LDAP en een eenvoudige webinterface. Bedoeld als accountbron voor onder meer Authelia, Authentik, Keycloak en Nextcloud. Stel LDAP niet rechtstreeks bloot aan internet.",
    "tags": ["ldap", "accounts", "sso", "identiteit"],
    "icon": {"provider": "selfhst", "id": "lldap"},
    "version": {"name": "stable"},
    "categories": ["beveiliging", "beheer"],
    "architectures": ["amd64", "arm64"],
    "architecture_note": "De officiële image ondersteunt AMD64, ARM64 en ARM/v7."
  },
  "variables": [
    {
      "title": "Algemeen",
      "items": [
        {"name": "service_name", "type": "str", "title": "Servicenaam", "default": "lldap", "required": true},
        {"name": "port_web", "type": "int", "title": "Webinterface", "default": 17170, "required": true},
        {"name": "port_ldap", "type": "int", "title": "LDAP-poort", "default": 3890, "required": true, "description": "Alleen op het vertrouwde LAN gebruiken; voor internet is LDAPS of een VPN nodig."},
        {"name": "appdata_dir", "type": "str", "title": "Appdata-map", "default": "/opt/serverup/appdata", "required": true},
        {"name": "timezone", "type": "str", "title": "Tijdzone", "default": "Europe/Amsterdam", "required": true},
        {"name": "puid", "type": "int", "title": "PUID", "default": 1000, "required": true},
        {"name": "pgid", "type": "int", "title": "PGID", "default": 1000, "required": true}
      ]
    },
    {
      "title": "Directory",
      "items": [
        {"name": "base_dn", "type": "str", "title": "Basis-DN", "default": "dc=example,dc=com", "required": true, "description": "Pas example.com aan je eigen interne domein aan."},
        {"name": "http_url", "type": "str", "title": "Publiek webadres", "default": "http://localhost:17170", "required": true}
      ]
    },
    {
      "title": "Geheimen",
      "items": [
        {"name": "ldap_user_pass", "type": "str", "title": "Adminwachtwoord", "default": "", "required": true, "secret": true, "generate": true, "credential": "password", "description": "Inloggen gaat met gebruiker admin en dit wachtwoord."},
        {"name": "jwt_secret", "type": "str", "title": "JWT-sleutel", "default": "", "required": true, "secret": true, "generate": "auto", "secret_bytes": 32},
        {"name": "key_seed", "type": "str", "title": "Versleutelingsseed", "default": "", "required": true, "secret": true, "generate": "auto", "secret_bytes": 32}
      ]
    }
  ]
}