---
version: "3"

services:
  postgres:
    container_name: postgres
    image: postgres
    environment:
      POSTGRES_DB: vaultwarden
      POSTGRES_PASSWORD: pass
      POSTGRES_USER: user

  ldap:
    container_name: ldap
    image: osixia/openldap

  vaultwarden:
    container_name: vaultwarden_server
    image: thegeeklab/vaultwarden
    depends_on:
      - postgres
    ports:
      - "80:8080"
    volumes:
      - data:/app/data
    environment:
      VAULTWARDEN_DATABASE_URL: postgresql://user:pass@postgres:5432/vaultwarden
      VAULTWARDEN_ADMIN_TOKEN: my_secure_token

  vaultwarden-ldap:
    container_name: ldap_sync
    restart: always
    image: thegeeklab/vaultwarden-ldap
    depends_on:
      - vaultwarden
      - ldap
    environment:
      VAULTWARDEN_LDAP_VAULTWARDEN_URL: http://vaultwarden_server:8080
      VAULTWARDEN_LDAP_VAULTWARDEN_ADMIN_TOKEN: my_secure_token
      VAULTWARDEN_LDAP_HOST: ldap
      VAULTWARDEN_LDAP_SSL: "False"
      VAULTWARDEN_LDAP_BIND_DN: "cn=admin,dc=example,dc=org"
      VAULTWARDEN_LDAP_SEARCH_BASE_DN: "dc=example,dc=org"
      VAULTWARDEN_LDAP_BIND_PASSWORD: admin

volumes:
  data:
    driver: local