# Shared dev GLAuth for OtOpcUa + MxAccessGateway + ScadaBridge.
# Deploy on the shared Docker host 10.100.0.35:  docker compose up -d
# Verify:  ldapsearch -x -H ldap://10.100.0.35:3893 \
#            -D cn=serviceaccount,dc=zb,dc=local -w '<service-account-password>' \
#            -b dc=zb,dc=local "(cn=multi-role)" memberOf
#          (the serviceaccount password is rotated out-of-band — SEC-36 — not recorded here)
name: zb-shared-glauth
services:
  glauth:
    image: glauth/glauth:latest
    container_name: zb-shared-glauth
    restart: unless-stopped
    ports:
      - "3893:3893"   # plain LDAP (Transport=None)
      - "3894:3894"   # LDAPS (Transport=Ldaps) — mxaccessgw#180
    volumes:
      - ./config.toml:/app/config/config.cfg:ro
      - ./tls:/app/config/tls:ro   # cert.pem (public, in repo) + key.pem (host only)