docker-compose.yml

version: '3.2'
services:
  openldap:
    image: chrch/ldap:latest
    deploy:
      placement:
        constraints:
          - node.role == manager
    environment:
      DEBUG: "false"
      LDAP_ADMIN_PASSWORD: "docker123"
      LDAP_LOG_LEVEL: "256"
      LDAP_BASE_DN: ""
      LDAP_BACKEND: "hdb"
      LDAP_TLS: "true"
      LDAP_TLS_CRT_FILENAME: "ldap.crt"
      LDAP_TLS_KEY_FILENAME: "ldap.key"
      LDAP_TLS_CA_CRT_FILENAME: "ca.crt"
      LDAP_TLS_ENFORCE: "false"
      LDAP_TLS_CIPHER_SUITE: "SECURE256:-VERS-SSL3.0"
      LDAP_TLS_PROTOCOL_MIN: "3.1"
      LDAP_TLS_VERIFY_CLIENT: "never"
      LDAP_REMOVE_CONFIG_AFTER_SETUP: "false"
      LDAP_SSL_HELPER_PREFIX: "ldap"
      LDAP_DOMAIN: "orcabank.com"
      LDAP_ORGANISATION: "OrcaBank Inc."
      LDAP_READONLY_USER: "true"
      
    volumes:
      - /var/lib/ldap
      - /etc/ldap/slapd.d
      - /container/service/slapd/assets/certs/
    ports:
      - "389:389"
      - "636:636"
    hostname: "orcabank.com"