From bf271329d32eac245cece429b68672e9de569616 Mon Sep 17 00:00:00 2001
From: BhasherBEL <github.it@bhasher.com>
Date: Wed, 4 Jan 2023 00:20:59 +0100
Subject: [PATCH] bxl storage

---
 bxl/auth.docker-compose.yaml    | 90 +++++++++++++++++++++++++++++++++
 bxl/storage.docker-compose.yaml | 26 ++++++++++
 2 files changed, 116 insertions(+)
 create mode 100644 bxl/auth.docker-compose.yaml
 create mode 100644 bxl/storage.docker-compose.yaml

diff --git a/bxl/auth.docker-compose.yaml b/bxl/auth.docker-compose.yaml
new file mode 100644
index 0000000..5d816e0
--- /dev/null
+++ b/bxl/auth.docker-compose.yaml
@@ -0,0 +1,90 @@
+version: '3.7'
+
+services:
+  openldap:
+    container_name: openldap
+    image: osixia/openldap:latest
+    ports:
+    - '389:389'
+    restart: unless-stopped
+    environment:
+    - LDAP_ADMIN_USERNAME=admin
+    - LDAP_ADMIN_PASSWORD=${ADMIN_PASSWORD}
+    - LDAP_READONLY_USER=true
+    - LDAP_READONLY_USER_USERNAME=readonly
+    - LDAP_READONLY_USER_PASSWORD=${READONLY_PASSWORD}
+    - LDAP_DOMAIN=bhasher.com
+    - LDAP_ORGANISATION=Bhasher
+    - LDAP_RFC2307BIS_SCHEMA=true
+    - LDAP_TLS=false
+    volumes:
+    - /mnt/Main/containers/openldap/ldap:/var/lib/ldap
+    - /mnt/Main/containers/openldap/slapd.d:/etc/ldap/slapd.d
+    networks:
+    - ldap
+  
+  ldapusermanager:
+    container_name: ldapusermanager
+    image: wheelybird/ldap-user-manager:latest
+    restart: unless-stopped
+    environment:
+    - LDAP_URI=ldap://openldap
+    - LDAP_BASE_DN=dc=bhasher,dc=com
+    - LDAP_ADMIN_BIND_DN=cn=admin,dc=bhasher,dc=com
+    - LDAP_ADMINS_GROUP=admin
+    - SERVER_HOSTNAME=lum.bhasher.com
+    - NO_HTTPS=true
+    - ORGANISATION_NAME=Bhasher
+    - LDAP_REQUIRE_STARTTLS=false
+    - FORCE_RFC2307BIS=true
+    - SHOW_POSIX_ATTRIBUTES=false
+    - LDAP_ADMIN_BIND_PWD=${ADMIN_PASSWORD}
+    - LDAP_USER_OU=users
+    - LDAP_GROUP_OU=groups
+    - LDAP_ACCOUNT_ATTRIBUTE=uid
+    - LDAP_GROUP_ATTRIBUTE=cn
+    - USERNAME_FORMAT={first_name}.{last_name}
+    - ENFORCE_SAFE_SYSTEM_NAMES=false
+    - PASSWORD_HASH=SHA512CRYPT
+    - ACCEPT_WEAK_PASSWORDS=false
+    - LDAP_ACCOUNT_ADDITIONAL_ATTRIBUTES=jpegPhoto^:Profile picture,sshpubkey^+:SSH public key
+    labels:
+    - "traefik.enable=true"
+    - "traefik.http.routers.lum.rule=Host(`lum.bhasher.com`)"
+    - "traefik.http.routers.lum.entrypoints=internalsecure"
+    - "traefik.http.services.lum.loadbalancer.server.port=80"
+    - "traefik.http.routers.lum.tls=true"
+    - "traefik.http.routers.lum.tls.certresolver=http"
+    ports:
+    - 4587:80
+    networks:
+    - ldap
+    - external
+
+  authelia:
+    container_name: authelia
+    image: authelia/authelia:latest
+    restart: unless-stopped
+    environment:
+    - TZ=Europe/Paris
+    labels:
+    - "traefik.enable=true"
+    - "traefik.http.routers.authelia.rule=Host(`idp.bhasher.com`)"
+    - "traefik.http.routers.authelia.entrypoints=internalsecure"
+    - "traefik.http.services.authelia.loadbalancer.server.port=9091"
+    - "traefik.http.routers.authelia.tls=true"
+    - "traefik.http.routers.authelia.tls.certresolver=http"
+    volumes:
+    - /mnt/Main/containers/authelia:/config
+    networks:
+    - ldap
+    - external
+    - storage
+
+
+networks:
+  ldap:
+  external:
+    external: true
+  storage:
+    external: true
\ No newline at end of file
diff --git a/bxl/storage.docker-compose.yaml b/bxl/storage.docker-compose.yaml
new file mode 100644
index 0000000..4287a64
--- /dev/null
+++ b/bxl/storage.docker-compose.yaml
@@ -0,0 +1,26 @@
+version: '3.7'
+
+services:
+  postgres:
+    container_name: postgres
+    image: postgres:15
+    restart: unless-stopped
+    environment:
+    - POSTGRES_USER=postgres
+    - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+    volumes:
+    - /mnt/Main/containers/postgres:/var/lib/postgresql/data
+    networks:
+    - storage
+
+  redis:
+    container_name: redis
+    image: redis:latest
+    restart: unless-stopped
+    networks:
+    - storage
+
+
+networks:
+  storage:
+    name: storage
\ No newline at end of file