---
ldap_proxy_base_dir: /etc/openldap
ldap_proxy_urls:
  - "ldapi:/// ldap:///"
ldap_proxy_options: []

ldap_proxy_tls_enabled: False
ldap_proxy_tls_cert_source: mycert.pem
ldap_proxy_tls_key_source: mykey.pem
ldap_proxy_tls_ca_source: ca.pem
ldap_proxy_tls_cert_path: "{{ ldap_proxy_base_dir }}/certs/mycert.pem"
ldap_proxy_tls_key_path: "{{ ldap_proxy_base_dir }}/certs/mykey.pem"
ldap_proxy_tls_ca_path: "{{ ldap_proxy_base_dir }}/certs/ca.path"

ldap_proxy_server: "ldap://ad.example.com:389"
ldap_proxy_server_suffix: "dc=example,dc=com"
ldap_proxy_readonly_enabled: True

ldap_proxy_loglevel: 0

ldap_proxy_acl_file: "{{ ldap_proxy_base_dir }}/slapd.access"
ldap_proxy_acls:
  - access_to:
      - '*'
    access_by:
      - '* read'

ldap_proxy_custom_schemas: []