services:
  lldap:
    container_name: lldap
    image: ghcr.io/lldap/lldap:v0.6.1-alpine-rootless
    restart: unless-stopped
    labels:
      - traefik.enable=true
      - traefik.http.routers.lldap.rule=Host(`${TRAEFIK_DOMAIN}`)
      - traefik.http.routers.lldap.entrypoints=${TRAEFIK_ENTRYPOINT}
      - traefik.http.services.lldap.loadbalancer.server.port=17170
    environment:
      - UID=${PUID}
      - GID=${PGID}
      - TZ=${TZ}
      - LLDAP_JWT_SECRET=${LLDAP_JWT_SECRET}
      - LLDAP_KEY_SEED=${LLDAP_KEY_SEED}
      - LLDAP_LDAP_BASE_DN=${LLDAP_LDAP_BASE_DN}
      - LLDAP_LDAP_USER_DN=${LLDAP_LDAP_USER_DN}
      - LLDAP_LDAP_USER_EMAIL=${LLDAP_LDAP_USER_EMAIL}
      - LLDAP_LDAP_USER_PASS=${LLDAP_LDAP_USER_PASS}
      - LLDAP_SMTP_OPTIONS__ENABLE_PASSWORD_RESET=true
      - LLDAP_SMTP_OPTIONS__SERVER=${LLDAP_SMTP_OPTIONS__SERVER}
      - LLDAP_SMTP_OPTIONS__PORT=${LLDAP_SMTP_OPTIONS__PORT}
      - LLDAP_SMTP_OPTIONS__SMTP_ENCRYPTION=${LLDAP_SMTP_OPTIONS__SMTP_ENCRYPTION}
      - LLDAP_SMTP_OPTIONS__USER=${LLDAP_SMTP_OPTIONS__USER}
      - LLDAP_SMTP_OPTIONS__PASSWORD=${LLDAP_SMTP_OPTIONS__PASSWORD}
      - LLDAP_SMTP_OPTIONS__FROM=LLDAP <${LLDAP_SMTP_OPTIONS__FROM}>
    volumes:
      - ${APPDATA_PATH}/lldap/data:/data
    ports:
      - ${PORT}:17170
    networks:
      - frontend

networks:
  frontend:
    external: true