From b29bfb151b12f136cc12592af38252c0ab1dfc67 Mon Sep 17 00:00:00 2001
From: Basil Bruhn <basil.bruhn@psi.ch>
Date: Fri, 14 Feb 2025 13:32:10 +0100
Subject: [PATCH] clean config hedgedoc

---
 docker-compose.yaml | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/docker-compose.yaml b/docker-compose.yaml
index 89856a6..a7a6ef3 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -62,17 +62,21 @@ services:
     image: quay.io/hedgedoc/hedgedoc:1.10.1
     container_name: sf_hedgedoc
     environment:
-      - CMD_DB_URL=postgres://{{ hedgedoc_user }}:{{ hedgedoc_password }}@hedgedoc_db:5432/hedgedoc
+      - CMD_DB_URL=postgres://${hedgedoc_user}:${hedgedoc_password}@hedgedoc_db:5432/hedgedoc
       - CMD_DOMAIN=sf-hedgedoc.psi.ch
       - CMD_URL_ADDPORT=false
       - CMD_PROTOCOL_USESSL=true
       - CMD_LDAP_URL=ldaps://dc00.d.psi.ch
-      - CMD_LDAP_BINDDN={{ bind_user }}
-      - CMD_LDAP_BINDCREDENTIALS={{ bind_password }}
+      - CMD_LDAP_BINDDN=${bind_user}
+      - CMD_LDAP_BINDCREDENTIALS=${bind_password}
       - CMD_LDAP_SEARCHBASE=OU=users,OU=psi,DC=d,DC=psi,DC=ch
-      - CMD_LDAP_SEARCHFILTER=(&(objectClass=user)(objectcategory=person)(sAMAccountName={{username}}))
+      - CMD_LDAP_SEARCHFILTER=(&(objectcategory=person)(objectclass=user)(|(sAMAccountName={{username}})(mail={{username}})))
       - CMD_LDAP_USERIDFIELD=sAMAccountName
       - CMD_LDAP_PROVIDERNAME="PSI"
+      - NODE_ENV=production
+      - CMD_EMAIL=false
+      - CMD_ALLOW_EMAIL_REGISTER=false
+      - CMD_SESSION_SECRET=${session_secret}
     volumes:
       - /opt/webcontent/sf-hedgedoc/uploads:/hedgedoc/public/uploads
     restart: always