services:
  lldap:
    container_name: lldap
    image: ghcr.io/lldap/lldap:v0.6.1-alpine-rootless
    restart: unless-stopped
    # labels:
    #   - traefik.enable=true
    #   - traefik.http.routers.lldap.rule=Host(`${TRAEFIK_DOMAIN}`)
    #   - traefik.http.routers.lldap.entrypoints=${TRAEFIK_ENTRYPOINT}
    #   - traefik.http.services.lldap.loadbalancer.server.port=17170
    environment:
      - UID=${PUID}
      - GID=${PGID}
      - TZ=${TZ}
      - LLDAP_JWT_SECRET=${LLDAP_JWT_SECRET}
      - LLDAP_KEY_SEED=${LLDAP_KEY_SEED}
      - LLDAP_LDAP_BASE_DN=${LLDAP_LDAP_BASE_DN}
      - LLDAP_LDAP_USER_DN=${LLDAP_LDAP_USER_DN}
      - LLDAP_LDAP_USER_EMAIL=${LLDAP_LDAP_USER_EMAIL}
      - LLDAP_LDAP_USER_PASS=${LLDAP_LDAP_USER_PASS}
    volumes:
      - ${APPDATA_PATH}/lldap/data:/data
    ports:
      - ${PORT}:17170
    networks:
      - frontend

networks:
  frontend:
    external: true