openldap

https://self-service-password.readthedocs.io/en/latest/installation.html#docker
https://www.cnblogs.com/keitsi/p/16618565.html

1. compose

cat > ssp.conf.php << EOF
<?php // My SSP configuration
\$keyphrase = "mysecret";
\$debug = true;
?>
EOF

# cat > docker-compose.yaml << EOF
version: '3.8'
services:
  openldap-01:
    image: bitnami/openldap:2.6.6
    container_name: openldap-01
    volumes:
      - openldap-data:/bitnami/openldap
    ports:
      - 1389:1389
    networks:
      openldap-net:
        ipv4_address: 172.18.14.11
    environment:
      - LDAP_ADMIN_USERNAME=admin
      - LDAP_ADMIN_PASSWORD=admin
      - LDAP_CONFIG_ADMIN_ENABLED=yes
      - LDAP_CONFIG_ADMIN_USERNAME=admin
      - LDAP_CONFIG_ADMIN_PASSWORD=admin
      - LDAP_ALLOW_ANON_BINDING=no
      - LDAP_ADMIN_DN=cn=admin,dc=example,dc=com
      - LDAP_ENABLE_SYNCPROV=true

  ldap-user-manager:
    image: wheelybird/ldap-user-manager:v1.11
    container_name: ldap-user-manager
    ports:
      - 29060:80
      - 29070:443
    networks:
      openldap-net:
        ipv4_address: 172.18.14.13
    environment:
      - LDAP_URI=ldap://openldap-01
      - LDAP_BASE_DN=dc=example,dc=com
      - LDAP_ADMIN_BIND_DN=cn=admin,dc=example,dc=com
      - LDAP_ADMIN_BIND_PWD=admin
      - LDAP_REQUIRE_STARTTLS=true
      - LDAP_IGNORE_CERT_ERRORS=true

  self-service-password:
    image: ltbproject/self-service-password:1.5
    container_name: self-service-password
    ports:
      - 29090:80
    volumes:
      - $PWD/ssp.conf.php:/var/www/conf/config.inc.local.php
    networks:
      openldap-net:
        ipv4_address: 172.18.14.14

volumes:
  openldap-data:
    name: openldap-data

networks:
  openldap-net:
    name: openldap-net
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 172.18.14.0/24
          gateway: 172.18.14.1
EOF