networks:
  proxy:
    name: ${APP_PROXY_NETWORK}

services:

  manager:
    image: wheelybird/ldap-user-manager:latest
    restart: always

    networks:
      proxy:
      default:

    environment:
      - "SERVER_HOSTNAME=lum.$APP_TOP_DOMAIN"
      - "LDAP_URI=$LDAP_SERVER_URI"
      - "LDAP_BASE_DN=$LDAP_BASE_DN"
      - "LDAP_ADMINS_GROUP=admins"
      - "LDAP_ADMIN_BIND_DN=cn=admin,$LDAP_BASE_DN"
      - "LDAP_ADMIN_BIND_PWD=$LDAP_ADMIN_PASSWORD"
        #- "LDAP_ADMIN_BIND_PWD=admin"
      - "LDAP_IGNORE_CERT_ERRORS=true"
      - "NO_HTTPS=true"
      - "ACCEPT_WEAK_PASSWORDS=true"

      # MrJK Tweaking
      - "USERNAME_REGEX=^[a-z][a-zA-Z0-9._-]{2,32}$$"

    labels:
      traefik.enable: "true"
      traefik.http.routers.lum.entrypoints: front-http,front-https
      traefik.http.routers.lum.rule: Host(`lum.$APP_TOP_DOMAIN`)
      traefik.http.routers.lum.service: lum
      traefik.http.routers.lum.tls: "true"
      traefik.http.routers.lum.tls.certresolver: $TRAEFIK_CERTRESOLV
      traefik.http.services.lum.loadbalancer.server.port: '80'