32 lines
1.6 KiB
YAML
32 lines
1.6 KiB
YAML
services:
|
|
obin-ad-user-creator:
|
|
# Portainer/TrueNAS can hit a BuildKit/buildx worker issue with Git-backed builds.
|
|
# Image is built on DockerTrueNAS from ./obin-ad-user-creator/Dockerfile before stack deploy.
|
|
image: obin-ad-user-creator:latest
|
|
container_name: obin-ad-user-creator
|
|
restart: unless-stopped
|
|
environment:
|
|
APP_TITLE: ${APP_TITLE:-Wheelytho Account Creation}
|
|
MINIMUM_PASSWORD_LENGTH: ${MINIMUM_PASSWORD_LENGTH:-12}
|
|
APP_REQUIRE_INVITE_CODE: ${APP_REQUIRE_INVITE_CODE:-false}
|
|
APP_INVITE_CODE: ${APP_INVITE_CODE-}
|
|
WELCOME_URL: ${WELCOME_URL:-https://welcome.wheelytho.com/}
|
|
AUTHELIA_SETUP_URL: ${AUTHELIA_SETUP_URL:-https://auth.wheelytho.com/}
|
|
AD_LDAPS_URL: ${AD_LDAPS_URL:-ldaps://192.168.30.15:636}
|
|
AD_BIND_USERNAME: ${AD_BIND_USERNAME:?set AD_BIND_USERNAME in Portainer runtime env}
|
|
AD_BIND_PASSWORD: ${AD_BIND_PASSWORD:?set AD_BIND_PASSWORD in Portainer runtime env}
|
|
AD_BASE_DN: ${AD_BASE_DN:-DC=local,DC=wheelz,DC=com}
|
|
AD_CREATE_OU: ${AD_CREATE_OU:-OU=WheelzUsers,DC=local,DC=wheelz,DC=com}
|
|
AD_DEFAULT_GROUPS: ${AD_DEFAULT_GROUPS:-Authelia-Friends}
|
|
AD_DOMAIN_UPN_SUFFIX: ${AD_DOMAIN_UPN_SUFFIX:-local.wheelz.com}
|
|
# Current lab AD cert is not trusted by the container yet. Move this to true after CA trust is added.
|
|
AD_TLS_VALIDATE: ${AD_TLS_VALIDATE:-false}
|
|
ports:
|
|
- "${OBIN_AD_USER_CREATOR_PORT:-8098}:8080"
|
|
healthcheck:
|
|
test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/health', timeout=3)"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|