dataset/seed/lemonldap/README.md

Table of Contents

• lemonldap
• Synopsis
• Basic variables
• General
• Reverse proxy
• Clients configuration
• LemonLDAP
• Variables for expert
• General
• OpenLDAP directory
• Client
• NGINX
• Reverse proxy
• Clients configuration
• LemonLDAP
• Requirements services
• Mandatories
• Optionals
• Example
• Dependances
• Useful for services

Return to the list of application services.

lemonldap

Synopsis

LemonLDAP, a Web Single Sign On and Access Management.

Basic variables

General

Reverse proxy

Clients configuration

This family is a leadership.

Parameter	Comments
general.revprox.revprox_client.revprox_client_external_domainnames mandatory, multiple Type: domainname	Service external domain name. Example: service.example.net
general.revprox.revprox_client.revprox_client_location mandatory Type: filename	URI to route request to the correct service. Default: /

LemonLDAP

Configuration de la solution d'authentification unique LemonLDAP::NG.

Parameter	Comments
general.lemonldap.lemon_mail_admin mandatory Type: mail	Courriel de l'administrateur. Example: admin@example.net

Variables for expert

General

OpenLDAP directory

Client

Parameter	Comments
general.ldap.client.ldapclient_family mandatory Type: unix_user	Restrict service configuration for a LDAP family. "all" for all families. Default: all

NGINX

Parameter	Comments
general.nginx.nginx_hash_bucket_size mandatory Type: choice	The bucket size for the server names hash tables. Choices: - 128 ← default - 64 - 32
general.nginx.nginx_post_max_size mandatory Type: number	The maximum allowed size of the client request body. This value is in Mb. Default: 32

Reverse proxy

Clients configuration

This family is a leadership.

Parameter	Comments
general.revprox.revprox_client.revprox_client_max_body_size Type: string	The maximum allowed size of the client request body.

LemonLDAP

Configuration de la solution d'authentification unique LemonLDAP::NG.

Parameter	Comments
general.lemonldap.lemon_proc mandatory Type: number	Nombre de processus dédié à LemonLdap (équivalent au nombre de processeurs). Default: 1

Requirements services

Mandatories

• LocalDNS: nsd-local
• SMTP: postfix-relay
• LDAP: openldap
• ReverseProxy: nginx-reverse-proxy

Optionals

• Journald: vector

bold: provider is mandatory

Example

Zone names are provided as examples. Think about adapting with the value of provider_zone in configuration file.

lemonldap:
  applicationservice: lemonldap
  provider_zone: oauth2
  zones_name:
    - ldap
    - localdns
    - reverseproxy
    - smtp
  values:
    general.revprox.revprox_client.revprox_client_external_domainnames:
      - service.example.net
    general.lemonldap.lemon_mail_admin: admin@example.net

Dependances

• ldap-client
• relay-mail-client
• nginx-https
  • nginx-common
  • reverse-proxy-client
• base-debian-bullseye
  • base-debian
    • systemd
      • base-machine
        • base
        • dns-local
        • pki-tls
      • journald
      • resolved

Useful for services

• dovecot: Postfix and Dovecot as mail servers (IMAP and submission).
• forgejo: Forgejo, a community managed lightweight code hosting solution.
• gitea: Transitional package for Gitea to Forgejo.
• grafana: Grafana is an analytics and interactive visualization web application.
• mailman: GNU Mailman, managing electronic mail discussion and e-newsletter lists.
• nextcloud: Nextcloud, Online collaboration platform.
• odoo: Odoo, an ERP and CRM.
• peertube: Peertube, a federated (ActivityPub) video streaming platform.
• piwigo: Piwigo, a photo management software.
• roundcube: Roundcube, a webmail.