freeipa/docker-compose.yml at master · washosk/freeipa · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
services:
  freeipa:
    image: quay.io/freeipa/freeipa-server:almalinux-9
    container_name: freeipa-server
    hostname: ipa.example.test
    environment:
      - IPA_SERVER_HOSTNAME=ipa.example.test
      - PASSWORD=${PASSWORD}
      - IPA_SERVER_INSTALL_OPTS=--unattended --realm=EXAMPLE.TEST --domain=example.test --admin-password=${PASSWORD} --ds-password=${PASSWORD} --ip-address=172.20.0.2 --no-ntp --skip-mem-check
    networks:
      ipa_net:
        ipv4_address: 172.20.0.2
    volumes:
      - ./data:/data:Z
      - ./scripts/fix-permissions.sh:/usr/local/bin/fix-permissions.sh:ro
      - ./scripts/ipa-server-configure-first.wrapper:/usr/sbin/ipa-server-configure-first:ro
      - ./scripts/ipa-server-configure-first.orig:/usr/sbin/ipa-server-configure-first.orig:ro
      - /sys/fs/cgroup:/sys/fs/cgroup:rw
    cgroup: host
    tmpfs:
      - /run
      - /tmp
    sysctls:
      - net.ipv6.conf.all.disable_ipv6=0
    ports:
      - "80:80"
      - "443:443"
      - "389:389"
      - "636:636"
      - "88:88"
      - "464:464"
      - "88:88/udp"
      - "464:464/udp"
    restart: unless-stopped

networks:
  ipa_net:
    ipam:
      config:
        - subnet: 172.20.0.0/24