(define-module (metznet machines ldap)
  #:use-module (gnu)
  #:use-module (gnu services certbot)
  #:use-module (metznet system base-system)
  #:use-module (metznet services slapd)
  #:export (ldap.metznet.ca ldap-services))

;; Restored from metznet-channel commit 425b173's metznet/machines/ldap.scm
;; (deleted there when system configs were split into a separate repo).
;; Deliberately no seed data here, matching that original -- the real
;; ldap.metznet.ca server already has a populated, live directory tree;
;; servers/ldap.scm's elaborate LDIF seeding (dc=metznet,dc=ca org,
;; ou=user/ou=group) doesn't match the ou=system,ou=accounts structure
;; the rest of this channel (sssd, kerberos.scm) actually binds against,
;; so it looks like a divergent prototype that was never really deployed.
(define-public ldap-services
  (append (list (service certbot-service-type
                         (certbot-configuration
                           (email "admin@metznet.ca")
                           (certificates (list (certificate-configuration
                                                  (domains '("ldap.metznet.ca")))))))
                (service slapd-service-type
                         (slapd-configuration (uris "ldap:// ldaps://"))))
          %metznet-server-services))

(define-public ldap.metznet.ca
  (operating-system
    (inherit %metznet-base-server-system)
    (host-name "ldap.metznet.ca")
    (services ldap-services)))

ldap.metznet.ca