From 7b55ab10387e448f5796996a57411c8aee414b6f Mon Sep 17 00:00:00 2001
From: Basil Bruhn <basil.bruhn@psi.ch>
Date: Thu, 13 Feb 2025 16:17:58 +0100
Subject: [PATCH] LDAP configuration for hedgedoc

---
 docker-compose.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/docker-compose.yaml b/docker-compose.yaml
index 110e78d..bb39eaa 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -66,6 +66,13 @@ services:
       - CMD_DOMAIN=sf-hedgedoc.psi.ch
       - CMD_URL_ADDPORT=false
       - CMD_PROTOCOL_USESSL=true
+      - CMD_LDAP_URL=dc00.psi.ch
+      - CMD_LDAP_BINDDN={{ bind_user }}
+      - CMD_LDAP_BINDCREDENTIALS={{ bind_pw }}
+      - CMD_LDAP_SEARCHBASE=OU=users,OU=psi,DC=d,DC=psi,DC=ch
+      - CMD_LDAP_SEARCHFILTER=(&(objectClass=user)(objectcategory=person)(|(CN=kst-*,OU=Official,OU=Groups,OU=psi,DC=d,DC=psi,DC=ch)(sAMAccountName=ext-*)(sAMAccountName=gac-*)))
+      - CMD_LDAP_USERIDFIELD=sAMAccountName
+      - CMD_LDAP_PROVIDERNAME="PSI"
     volumes:
       - /opt/webcontent/sf-hedgedoc/uploads:/hedgedoc/public/uploads
     restart: always