services:
  lldap:
    image: lldap/lldap:latest
    container_name: lldap
    restart: unless-stopped
    ports:
      - "3890:3890"     # LDAP port
      - "17170:17170"   # Web UI port
    env_file:
      - .env
    volumes:
      - lldap_data:/data
    networks:
      - homelab
    labels:
      traefik.enable: true
      traefik.http.routers.lldap.rule: Host(`lldap.fig.systems`)
      traefik.http.routers.lldap.entrypoints: websecure
      traefik.http.routers.lldap.tls.certresolver: letsencrypt
      traefik.http.services.lldap.loadbalancer.server.port: 17170
      traefik.http.routers.lldap.middlewares: tinyauth

networks:
  homelab:
    external: true

volumes:
  lldap_data:
    driver: local