version: "3.8"
services:
  authentik_ldap:
      image: ghcr.io/goauthentik/ldap:2024.10.5
      # Optionally specify which networks the container should be
      # might be needed to reach the core authentik server
      networks:
        - internal
        - proxy
      ports:
        - 389:3389
        - 636:6636
      secrets:
        - ldap_token
      environment:
        - AUTHENTIK_HOST=https://${DOMAIN}
        - AUTHENTIK_INSECURE=true
        - AUTHENTIK_TOKEN=file:///run/secrets/ldap_token

secrets:
  ldap_token:
    external: true
    name: ${STACK_NAME}_ldap_token_${SECRET_LDAP_TOKEN_VERSION}