33 lines
1.4 KiB
Scheme
33 lines
1.4 KiB
Scheme
(define-module (metznet machines ldap)
|
|
#:use-module (gnu)
|
|
#:use-module (gnu services certbot)
|
|
#:use-module (metznet system base-system)
|
|
#:use-module (metznet services slapd)
|
|
#:export (ldap.metznet.ca ldap-services))
|
|
|
|
;; Restored from metznet-channel commit 425b173's metznet/machines/ldap.scm
|
|
;; (deleted there when system configs were split into a separate repo).
|
|
;; Deliberately no seed data here, matching that original -- the real
|
|
;; ldap.metznet.ca server already has a populated, live directory tree;
|
|
;; servers/ldap.scm's elaborate LDIF seeding (dc=metznet,dc=ca org,
|
|
;; ou=user/ou=group) doesn't match the ou=system,ou=accounts structure
|
|
;; the rest of this channel (sssd, kerberos.scm) actually binds against,
|
|
;; so it looks like a divergent prototype that was never really deployed.
|
|
(define-public ldap-services
|
|
(append (list (service certbot-service-type
|
|
(certbot-configuration
|
|
(email "admin@metznet.ca")
|
|
(certificates (list (certificate-configuration
|
|
(domains '("ldap.metznet.ca")))))))
|
|
(service slapd-service-type
|
|
(slapd-configuration (uris "ldap:// ldaps://"))))
|
|
%metznet-server-services))
|
|
|
|
(define-public ldap.metznet.ca
|
|
(operating-system
|
|
(inherit %metznet-base-server-system)
|
|
(host-name "ldap.metznet.ca")
|
|
(services ldap-services)))
|
|
|
|
ldap.metznet.ca
|