VPN_LDAP_DOCKER-COMPOSE.YML

version: '2'
services:
  openldap:
    image: osixia/openldap:1.2.1
    container_name: openldap
    environment:
      LDAP_LOG_LEVEL: "256"
      LDAP_ORGANISATION: "example"
      LDAP_DOMAIN: "example.com"
      LDAP_BASE_DN: ""
      LDAP_ADMIN_PASSWORD: "admin"
      LDAP_CONFIG_PASSWORD: "config"
      LDAP_READONLY_USER: "false"
      #LDAP_READONLY_USER_USERNAME: "readonly"
      #LDAP_READONLY_USER_PASSWORD: "readonly"
      LDAP_RFC2307BIS_SCHEMA: "false"
      LDAP_BACKEND: "mdb"
      LDAP_TLS: "false"
      #LDAP_TLS_CRT_FILENAME: "ldap.crt"
      #LDAP_TLS_KEY_FILENAME: "ldap.key"
      #LDAP_TLS_CA_CRT_FILENAME: "ca.crt"
      #LDAP_TLS_ENFORCE: "false"
      #LDAP_TLS_CIPHER_SUITE: "SECURE256:-VERS-SSL3.0"
      #LDAP_TLS_PROTOCOL_MIN: "3.1"
      #LDAP_TLS_VERIFY_CLIENT: "demand"
      LDAP_REPLICATION: "false"
      #LDAP_REPLICATION_CONFIG_SYNCPROV: "binddn="cn=admin,cn=config" bindmethod=simple credentials=$LDAP_CONFIG_PASSWORD searchbase="cn=config" type=refreshAndPersist retry="60 +" timeout=1 starttls=critical"
      #LDAP_REPLICATION_DB_SYNCPROV: "binddn="cn=admin,$LDAP_BASE_DN" bindmethod=simple credentials=$LDAP_ADMIN_PASSWORD searchbase="$LDAP_BASE_DN" type=refreshAndPersist interval=00:00:00:10 retry="60 +" timeout=1 starttls=critical"
      #LDAP_REPLICATION_HOSTS: "#PYTHON2BASH:['ldap://ldap.example.org','ldap://ldap2.example.org']"
      KEEP_EXISTING_CONFIG: "true"
      LDAP_REMOVE_CONFIG_AFTER_SETUP: "true"
      #LDAP_SSL_HELPER_PREFIX: "ldap"
    tty: true
    stdin_open: true
    volumes:
      - ./ldap/var:/var/lib/ldap
      - ./ldap/etc:/etc/ldap/slapd.d
      - ./ldap/certs:/container/service/slapd/assets/certs/
    ports:
      - "389:389"
      - "636:636"
    domainname: "example.com" # important: same as hostname
    hostname: "example.com"
  phpldapadmin:
    image: osixia/phpldapadmin:latest
    container_name: phpldapadmin
    environment:
      PHPLDAPADMIN_LDAP_HOSTS: "openldap"
      PHPLDAPADMIN_HTTPS: "false"
    ports:
      - "51000:80"
      #- "443:443"
    depends_on:
      - openldap
  freeradius:
    image: irasnyd/freeradius-ldap:latest
    container_name: freeradius
    ports:
      - "1812:1812/udp"
      - "1813:1813/udp"
    environment:
      - "LDAP_HOST=openldap"
      - "LDAP_USER=cn=admin,dc=example,dc=com"
      - "LDAP_PASS=admin"
      - "LDAP_BASEDN=dc=example,dc=com"
      - "LDAP_USER_BASEDN=ou=users,dc=example,dc=com"
      - "LDAP_GROUP_BASEDN=ou=vpnusers,ou=groups,dc=example,dc=com"
      #- "LDAP_RADIUS_ACCESS_GROUP=vpnaccess"
      - "RADIUS_CLIENT_CREDENTIALS=1.2.3.4:password1234,5.6.7.8:password5678"
    mem_limit: "1g"
    restart: "always"
    depends_on:
      - openldap
  softether:
    image: siomiz/softethervpn
    container_name: vpn
    network_mode: host
    privileged: true
    #ports:
    #  - 500:500/udp
    #  - 4500:4500/udp
    #  - 1701:1701/tcp
    #  - 1194:1194/udp
    #  - 5555:5555/tcp
    #  - 992:992/tcp
    environment:
      - PSK=password
      - USERNAME=user
      - PASSWORD=password
      - SPW=password
      - HPW=password
    volumes:
      - "./vpn/:/usr/vpnserver/server_log/"
    #cap_add:
    #  - NET_ADMIN