name: kanboard
services:
  app:
    image: kanboard/kanboard:latest
    container_name: kanboard
    restart: unless-stopped
    ports:
      - "8080:80"
      - "8443:443"
    volumes:
      - data:/var/www/app/data
      - plugins:/var/www/app/plugins
      - certs:/etc/nginx/ssl
    environment:
      - PLUGIN_INSTALLER=false  # disable web based plugin installation
      - LDAP_AUTH=true
      - LDAP_PORT=389
      - LDAP_SERVER=192.168.1.100
      - LDAP_SSL_VERIFY=false
      - LDAP_START_TLS=true
      - LDAP_BIND_TYPE=proxy
      - LDAP_USERNAME=uid=search,dc=home
      - LDAP_PASSWORD=SuperSecretPassword
      - LDAP_USER_BASE_DN=ou=People,dc=home
      - LDAP_USER_FILTER=uid=%s
      - LDAP_USER_ATTRIBUTE_USERNAME=uid
      - LDAP_USER_ATTRIBUTE_FULLNAME=cn
      - LDAP_USER_ATTRIBUTE_EMAIL=mail
      - LDAP_GROUP_BASE_DN=ou=Groups,dc=home
      - LDAP_GROUP_ADMIN_DN=cn=Admins,ou=Groups,dc=home
      - LDAP_GROUP_USER_FILTER=(&(objectClass=posixGroup)(memberUid=%s))
volumes:
  data:
  plugins:
  certs: