added lemonldap

deploy_matrix.yml

@@ -39,6 +39,11 @@
         - "{{ vol_db }}"  
         - "{{ npm_data }}"
         - "{{ npm_letsencrypt }}"
+        - "{{ lemonldap_data }}"
+        - "{{ lemonldap_cfg }}" 
+        - "{{ lemonldap_perl }}"     
+        - "{{ lemonldap_nginx }}" 
+        - "{{ lemonldap_lib }}"
 
     # -----------------------------------------------------------------
     # Pull required images (including Teamspeak)
@@ -74,6 +79,11 @@
         name: "{{ db_image }}"
         state: present
 
+    - name: Pull LemonLDAP image
+      containers.podman.podman_image:
+        name: "{{ lemon_image }}"
+        state: present
+
     # -----------------------------------------------------------------
     # Render all configuration files from the templates
     # -----------------------------------------------------------------
@@ -238,4 +248,29 @@
         network: "{{ podman_network }}"
         restart_policy: always
 
-       
+    # -----------------------------------------------------------------
+    # LemonLDAP-NG 
+    #------------------------------------------------------------------
+    - name: Start LemonLDAP container
+      containers.podman.podman_container:
+        name: "{{ lemonldap_container_name }}"
+        image: "{{ lemonldap_image }}"
+        state: started
+        ports:
+          - "{{ lemonldap_http_port }}:80"
+          - "{{ lemonldap_https_port }}:443"
+        env:
+          SSODOMAIN="{{ top_domain }}"
+          PORTAL_HOSTNAME="{{ ldap_portal_hostname }}"
+          MANAGER_HOSTNAME="{{ ldap_manager_hostname }}"
+          HANDLER_HOSTNAME="{{ ldap_hanlder_hostname }}"
+          PORT="{{ lemonldap_port }}"
+          FASTCGI_LISTEN_PORT="{{ lemonldap_cgi_port }}"
+        volumes:
+          - "{{ lemonldap_data }}:/usr/share/lemonldap-ng:Z"
+          - "{{ lemonldap_cfg }}:/etc/lemonldap-ng:Z" 
+          - "{{ lemonldap_perl }}:/usr/share:Z" 
+          - "{{ lemonldap_nginx }}:/etc/nginx/sites-enabled:Z" 
+          - "{{ lemonldap_lib }}:/var/lib/lemonldap-ng:Z"          
+        network: "{{ podman_network }}"
+        restart_policy: always

vars/vars.yml

@@ -10,7 +10,8 @@ turn_domain: "turn.fpov.space"
 matrix_email: "boxswappers@gmail.com"
 admin_domain: "mtxadm.fpov.space"
 element_domain: "element.fpov.space"
-
+ldap_manager_hostname: "auth.fpov.space"
+ldap_handler_hostname: "handler.fpov.space"
 # --------------------------------------------------------------
 # Ports
 # --------------------------------------------------------------
@@ -56,6 +57,7 @@ npm_image: "docker.io/jc21/nginx-proxy-manager:latest"
 teamspeak_image: "docker.io/teamspeak:latest"
 synapse_admin_image: "docker.io/awesometechnologies/synapse-admin:latest"
 element_image: "docker.io/vectorim/element-web:latest"
+lemon_image: "docker.io/lemonldapng/lemonldap-ng:latest"
 
 
 # --------------------------------------------------------------
@@ -71,6 +73,11 @@ vol_teamspeak: teamspeak_data
 npm_data: npm_data
 npm_letsencrypt: letsencrypt  
 vol_db: postgres_db   
+lemonldap_data: ldap_data
+lemonldap_cfg: ldap_cfg
+lemonldap_perl: ldap_pearl     
+lemonldap_nginx: ldap_nginx
+lemonldap_lib: ldap_lib
 
 # --------------------------------------------------------------
 # Paths on the target host (temporary files)
@@ -117,3 +124,13 @@ landing_message: |
   automatic Let’s Encrypt certificates, a TURN server for voice/video, and a
   simple landing page.
 
+# --------------------------------------------------------------
+# Lemon LDAP
+# --------------------------------------------------------------
+lemonldap_container_name: "lemon"
+lemonldap_http_port: "8118"
+lemonldap_https_port: "444"
+ldap_portal_hostname: "lemon"
+lemonldap_port: "8081"
+lemonldap_cgi_port: "9000"
+ldap_ssodomain: "fpov"