docker-compose/lldap/compose.yaml

services:
  lldap_db:
    container_name: lldap_db
    image: docker.io/library/postgres:18.3@sha256:78481659c47e862334611ccdaf7c369c986b3046da9857112f3b309114a65fb4
    restart: unless-stopped
    environment:
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_DB=${POSTGRES_DB}
      - PGDATA=/var/lib/postgresql/18/docker
    volumes:
      - ${APPDATA_PATH}/lldap/db:/var/lib/postgresql
    networks:
      - backend
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s

  lldap:
    container_name: lldap
    image: ghcr.io/lldap/lldap:v0.6.2-alpine-rootless@sha256:35df821899ec54c11eaab395e9c68e191e2582592cba343b0a904f6821aadcd2
    restart: unless-stopped
    depends_on:
      lldap_db:
        condition: service_healthy
    environment:
      - UID=${PUID}
      - GID=${PGID}
      - TZ=${TZ}
      - LLDAP_JWT_SECRET=${LLDAP_JWT_SECRET}
      - LLDAP_KEY_SEED=${LLDAP_KEY_SEED}
      - LLDAP_LDAP_BASE_DN=${LLDAP_LDAP_BASE_DN}
      - LLDAP_LDAP_USER_DN=${LLDAP_LDAP_USER_DN}
      - LLDAP_LDAP_USER_PASS=${LLDAP_LDAP_USER_PASS}
      - LLDAP_LDAP_USER_EMAIL=${LLDAP_LDAP_USER_EMAIL}
      - LLDAP_DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@lldap_db/${POSTGRES_DB}
    volumes:
      - ${APPDATA_PATH}/lldap/data:/data
    ports:
      - ${LDAP_PORT}:3890
      - ${WEBGUI_PORT}:17170
    networks:
      - frontend
      - backend

networks:
  frontend:
    external: true
  backend:
    external: true