Add LDAP authentication configuration to Tube Archivist service

This commit is contained in:
Nikholas Pcenicni
2026-05-08 22:33:22 -04:00
parent 8f1738e80a
commit 4adaf100a2
2 changed files with 45 additions and 0 deletions

View File

@@ -17,6 +17,20 @@ services:
- TA_PASSWORD=${TA_PASSWORD}
- ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
- TZ=${TZ:-UTC}
# LDAP authentication (Authentik LDAP outpost by default)
- TA_LOGIN_AUTH_MODE=${TA_LOGIN_AUTH_MODE:-ldap_local}
- TA_LDAP_SERVER_URI=${TA_LDAP_SERVER_URI}
- TA_LDAP_DISABLE_CERT_CHECK=${TA_LDAP_DISABLE_CERT_CHECK}
- TA_LDAP_BIND_DN=${TA_LDAP_BIND_DN}
- TA_LDAP_BIND_PASSWORD=${TA_LDAP_BIND_PASSWORD}
- TA_LDAP_USER_BASE=${TA_LDAP_USER_BASE}
- TA_LDAP_USER_FILTER=${TA_LDAP_USER_FILTER:-(objectClass=user)}
- TA_LDAP_USER_ATTR_MAP_USERNAME=${TA_LDAP_USER_ATTR_MAP_USERNAME:-cn}
- TA_LDAP_USER_ATTR_MAP_PERSONALNAME=${TA_LDAP_USER_ATTR_MAP_PERSONALNAME:-givenName}
- TA_LDAP_USER_ATTR_MAP_SURNAME=${TA_LDAP_USER_ATTR_MAP_SURNAME:-sn}
- TA_LDAP_USER_ATTR_MAP_EMAIL=${TA_LDAP_USER_ATTR_MAP_EMAIL:-mail}
- TA_LDAP_PROMOTE_USERNAMES_TO_SUPERUSER=${TA_LDAP_PROMOTE_USERNAMES_TO_SUPERUSER}
- TA_LDAP_PROMOTE_USERNAMES_TO_STAFF=${TA_LDAP_PROMOTE_USERNAMES_TO_STAFF}
restart: unless-stopped
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:8000/api/health/"]