FROM docker.io/alpine:3.20@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a

LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
LABEL org.opencontainers.image.title="openldap"
LABEL org.opencontainers.image.url="https://gitea.rknet.org/container/openldap"
LABEL org.opencontainers.image.source="https://gitea.rknet.org/container/openldap"
LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/container/openldap"

ARG TARGETOS
ARG TARGETARCH
ARG TARGETVARIANT

# renovate: datasource=repology depName=alpine_3_20/openldap versioning=loose
ENV OPENLDAP_VERSION=2.6.8-r0

RUN addgroup -g 1001 -S ldap && \
    adduser -S -D -H -u 1001 -h /openldap -G ldap -g ldap ldap && \
    apk --update add --virtual .build-deps curl && \
    apk --update --no-cache add openldap \
        openldap-back-ldap \
        openldap-back-mdb \
        openldap-overlay-rwm \
        openldap-overlay-memberof \
        openldap-clients && \
    mkdir -p /openldap/conf /openldap/data && \
    cp /etc/openldap/slapd.conf /openldap/conf/slapd.conf && \
    chown -R ldap:ldap /openldap && \
    apk del .build-deps && \
    rm -rf /var/cache/apk/* && \
    rm -rf /tmp/*

ADD overlay/ /

EXPOSE 389 636

USER 1001

STOPSIGNAL SIGTERM

WORKDIR /openldap
CMD ["/usr/sbin/slapd", "-d", "stats", "-u", "ldap", "-g", "ldap", "-f", "/openldap/conf/slapd.conf", "-h", "ldaps:// ldap://"]