services:
  openldap:
    build: .
    image: enterprise-openldap:latest
    container_name: openldap
    hostname: ldap.example.com
    environment:
      LDAP_DOMAIN: example.com
      LDAP_ORGANISATION: "Example Corporation"
      LDAP_ADMIN_PASSWORD: ${LDAP_ADMIN_PASSWORD:-changeme}
      LDAP_TLS_ENABLED: "true"
      LDAP_CREATE_SERVICE_ACCOUNTS: "true"
      LDAP_LOG_LEVEL: "256"
    volumes:
      - ldap_data:/var/lib/openldap/openldap-data
      - ldap_config:/etc/openldap/slapd.d
      - ./certs:/certs:ro
      - ./ldif:/ldif/custom:ro
    ports:
      - "389:389"
      - "636:636"
    networks:
      - ldap_net
    restart: unless-stopped

volumes:
  ldap_data:
  ldap_config:

networks:
  ldap_net: