105 lines
2.1 KiB
HCL
105 lines
2.1 KiB
HCL
job "lldap" {
|
|
datacenters = ["dc1"]
|
|
type = "service"
|
|
|
|
group "lldap" {
|
|
|
|
network {
|
|
mode = "bridge"
|
|
|
|
port "web" {
|
|
to = 17170
|
|
}
|
|
|
|
port "ldap" {
|
|
to = 3890
|
|
}
|
|
}
|
|
|
|
volume "lldap-data" {
|
|
type = "host"
|
|
read_only = false
|
|
source = "lldap-data"
|
|
}
|
|
|
|
service {
|
|
name = "lldap"
|
|
provider = "nomad"
|
|
port = "ldap"
|
|
}
|
|
|
|
service {
|
|
name = "ldap-admin"
|
|
provider = "nomad"
|
|
port = "web"
|
|
|
|
tags = [
|
|
"traefik.enable=true",
|
|
"traefik.http.routers.ldap-admin.entryPoints=websecure",
|
|
]
|
|
}
|
|
|
|
task "lldap" {
|
|
driver = "docker"
|
|
|
|
volume_mount {
|
|
volume = "lldap-data"
|
|
destination = "/data"
|
|
read_only = false
|
|
}
|
|
|
|
config {
|
|
image = "nitnelave/lldap:v0.4"
|
|
ports = ["ldap", "web"]
|
|
args = ["run", "--config-file", "/lldap_config.toml"]
|
|
|
|
mount {
|
|
type = "bind"
|
|
source = "secrets/lldap_config.toml"
|
|
target = "/lldap_config.toml"
|
|
}
|
|
}
|
|
|
|
env = {
|
|
"LLDAP_LDAP_PORT" = "${NOMAD_PORT_ldap}"
|
|
"LLDAP_HTTP_PORT" = "${NOMAD_PORT_web}"
|
|
}
|
|
|
|
template {
|
|
data = <<EOH
|
|
database_url = "sqlite:///data/users.db?mode=rwc"
|
|
key_file = "/data/private_key"
|
|
ldap_base_dn = "{{ with nomadVar "nomad/jobs" }}{{ .base_dn }}{{ end }}"
|
|
{{ with nomadVar "nomad/jobs/lldap" }}
|
|
jwt_secret = "{{ .jwt_secret }}"
|
|
ldap_user_dn = "{{ .admin_user }}"
|
|
ldap_user_email = "{{ .admin_email }}"
|
|
ldap_user_pass = "{{ .admin_password }}"
|
|
{{ end -}}
|
|
{{ with nomadVar "nomad/jobs" -}}
|
|
[smtp_options]
|
|
enable_password_reset = true
|
|
server = "{{ .smtp_server }}"
|
|
port = {{ .smtp_port }}
|
|
tls_required = {{ .smtp_tls }}
|
|
user = "{{ .smtp_user }}"
|
|
password = "{{ .smtp_password }}"
|
|
{{ end -}}
|
|
{{ with nomadVar "nomad/jobs/lldap" -}}
|
|
from = "{{ .smtp_from }}"
|
|
reply_to = "{{ .smtp_reply_to }}"
|
|
{{ end -}}
|
|
EOH
|
|
destination = "secrets/lldap_config.toml"
|
|
change_mode = "restart"
|
|
}
|
|
|
|
resources {
|
|
cpu = 10
|
|
memory = 200
|
|
memory_max = 200
|
|
}
|
|
}
|
|
}
|
|
}
|