60 lines
1.5 KiB
YAML
60 lines
1.5 KiB
YAML
# 本機 OpenLDAP（LDAP + ZITADEL 整合測試）
|
||
#
|
||
# 獨立啟動（只跑 LDAP）：
|
||
# docker compose -f deploy/openldap/docker-compose.yml up -d
|
||
# make ldap-wait # 等 ready 並 seed alice/bob
|
||
#
|
||
# 或由主 compose 以 profile 啟動：
|
||
# make ldap-up # profile ldap
|
||
# make k6-up # profile k6（含 ZITADEL + Postgres + OpenLDAP）
|
||
#
|
||
# ZITADEL Console 建 LDAP IdP 時，Server 填 ldap://openldap:389（容器網路）
|
||
# 本機 ldapsearch 用 localhost:389
|
||
|
||
services:
|
||
openldap:
|
||
profiles: ["ldap", "k6"]
|
||
image: osixia/openldap:1.5.0
|
||
container_name: gateway-openldap
|
||
restart: unless-stopped
|
||
environment:
|
||
LDAP_ORGANISATION: "GatewayDev"
|
||
LDAP_DOMAIN: "gateway.local"
|
||
LDAP_ADMIN_PASSWORD: "admin"
|
||
LDAP_CONFIG_PASSWORD: "config"
|
||
LDAP_TLS: "false"
|
||
ports:
|
||
- "389:389"
|
||
volumes:
|
||
- openldap_data:/var/lib/ldap
|
||
- openldap_config:/etc/ldap/slapd.d
|
||
# 測試帳號由 make ldap-seed 寫入（勿 :ro 掛 bootstrap，osixia 啟動需 chown 會失敗）
|
||
healthcheck:
|
||
test:
|
||
[
|
||
"CMD",
|
||
"ldapsearch",
|
||
"-x",
|
||
"-H",
|
||
"ldap://localhost",
|
||
"-b",
|
||
"dc=gateway,dc=local",
|
||
"-D",
|
||
"cn=admin,dc=gateway,dc=local",
|
||
"-w",
|
||
"admin",
|
||
"-LLL",
|
||
"-s",
|
||
"base",
|
||
"(objectClass=*)",
|
||
"dn",
|
||
]
|
||
interval: 5s
|
||
timeout: 5s
|
||
retries: 24
|
||
start_period: 20s
|
||
|
||
volumes:
|
||
openldap_data:
|
||
openldap_config:
|