42 lines
2.5 KiB
JSON
42 lines
2.5 KiB
JSON
{
|
|
"kind": "compose",
|
|
"metadata": {
|
|
"name": "LLDAP",
|
|
"description": "Lichtgewicht centrale gebruikersmap met LDAP en een eenvoudige webinterface. Bedoeld als accountbron voor onder meer Authelia, Authentik, Keycloak en Nextcloud. Stel LDAP niet rechtstreeks bloot aan internet.",
|
|
"tags": ["ldap", "accounts", "sso", "identiteit"],
|
|
"icon": {"provider": "selfhst", "id": "lldap"},
|
|
"version": {"name": "stable"},
|
|
"categories": ["beveiliging", "beheer"],
|
|
"architectures": ["amd64", "arm64"],
|
|
"architecture_note": "De officiële image ondersteunt AMD64, ARM64 en ARM/v7."
|
|
},
|
|
"variables": [
|
|
{
|
|
"title": "Algemeen",
|
|
"items": [
|
|
{"name": "service_name", "type": "str", "title": "Servicenaam", "default": "lldap", "required": true},
|
|
{"name": "port_web", "type": "int", "title": "Webinterface", "default": 17170, "required": true},
|
|
{"name": "port_ldap", "type": "int", "title": "LDAP-poort", "default": 3890, "required": true, "description": "Alleen op het vertrouwde LAN gebruiken; voor internet is LDAPS of een VPN nodig."},
|
|
{"name": "appdata_dir", "type": "str", "title": "Appdata-map", "default": "/opt/serverup/appdata", "required": true},
|
|
{"name": "timezone", "type": "str", "title": "Tijdzone", "default": "Europe/Amsterdam", "required": true},
|
|
{"name": "puid", "type": "int", "title": "PUID", "default": 1000, "required": true},
|
|
{"name": "pgid", "type": "int", "title": "PGID", "default": 1000, "required": true}
|
|
]
|
|
},
|
|
{
|
|
"title": "Directory",
|
|
"items": [
|
|
{"name": "base_dn", "type": "str", "title": "Basis-DN", "default": "dc=example,dc=com", "required": true, "description": "Pas example.com aan je eigen interne domein aan."},
|
|
{"name": "http_url", "type": "str", "title": "Publiek webadres", "default": "http://localhost:17170", "required": true}
|
|
]
|
|
},
|
|
{
|
|
"title": "Geheimen",
|
|
"items": [
|
|
{"name": "ldap_user_pass", "type": "str", "title": "Adminwachtwoord", "default": "", "required": true, "secret": true, "generate": true, "credential": "password", "description": "Inloggen gaat met gebruiker admin en dit wachtwoord."},
|
|
{"name": "jwt_secret", "type": "str", "title": "JWT-sleutel", "default": "", "required": true, "secret": true, "generate": "auto", "secret_bytes": 32},
|
|
{"name": "key_seed", "type": "str", "title": "Versleutelingsseed", "default": "", "required": true, "secret": true, "generate": "auto", "secret_bytes": 32}
|
|
]
|
|
}
|
|
]
|
|
}
|