Add LDAP authentication configuration to Tube Archivist service
This commit is contained in:
@@ -17,6 +17,20 @@ services:
|
||||
- TA_PASSWORD=${TA_PASSWORD}
|
||||
- ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
|
||||
- TZ=${TZ:-UTC}
|
||||
# LDAP authentication (Authentik LDAP outpost by default)
|
||||
- TA_LOGIN_AUTH_MODE=${TA_LOGIN_AUTH_MODE:-ldap_local}
|
||||
- TA_LDAP_SERVER_URI=${TA_LDAP_SERVER_URI}
|
||||
- TA_LDAP_DISABLE_CERT_CHECK=${TA_LDAP_DISABLE_CERT_CHECK}
|
||||
- TA_LDAP_BIND_DN=${TA_LDAP_BIND_DN}
|
||||
- TA_LDAP_BIND_PASSWORD=${TA_LDAP_BIND_PASSWORD}
|
||||
- TA_LDAP_USER_BASE=${TA_LDAP_USER_BASE}
|
||||
- TA_LDAP_USER_FILTER=${TA_LDAP_USER_FILTER:-(objectClass=user)}
|
||||
- TA_LDAP_USER_ATTR_MAP_USERNAME=${TA_LDAP_USER_ATTR_MAP_USERNAME:-cn}
|
||||
- TA_LDAP_USER_ATTR_MAP_PERSONALNAME=${TA_LDAP_USER_ATTR_MAP_PERSONALNAME:-givenName}
|
||||
- TA_LDAP_USER_ATTR_MAP_SURNAME=${TA_LDAP_USER_ATTR_MAP_SURNAME:-sn}
|
||||
- TA_LDAP_USER_ATTR_MAP_EMAIL=${TA_LDAP_USER_ATTR_MAP_EMAIL:-mail}
|
||||
- TA_LDAP_PROMOTE_USERNAMES_TO_SUPERUSER=${TA_LDAP_PROMOTE_USERNAMES_TO_SUPERUSER}
|
||||
- TA_LDAP_PROMOTE_USERNAMES_TO_STAFF=${TA_LDAP_PROMOTE_USERNAMES_TO_STAFF}
|
||||
restart: unless-stopped
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-f", "http://localhost:8000/api/health/"]
|
||||
|
||||
Reference in New Issue
Block a user