Skip to content

Lldap

services.lldap.enable

Whether to enable lldap, a lightweight authentication server that provides an opinionated, simplified LDAP interface for authentication. Type: boolean

Default

false

Example

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.environment

Environment variables passed to the service. Any config option name prefixed with LLDAP_ takes priority over the one in the configuration file.

Type: attribute set of string

Default

{ }

Example

{LLDAP_JWT_SECRET_FILE = "/run/lldap/jwt_secret";LLDAP_LDAP_USER_PASS_FILE = "/run/lldap/user_password";}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.environmentFile

Environment file as defined in {manpage}systemd.exec(5) passed to the service.

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.package

The lldap package to use. Type: package

Default

pkgs.lldap

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.settings

Free-form settings written directly to the lldap_config.toml file. Refer to https://github.com/lldap/lldap/blob/main/lldap_config.docker_template.toml for supported values.

Type: TOML value

Default

{ }

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.settings.database_url

Database URL. Type: string

Default

"sqlite://./users.db?mode=rwc"

Example

"postgres://postgres-user:password@postgres-server/my-database"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.settings.http_host

The host address that the HTTP server will be bound to. Type: string

Default

"::"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.settings.http_port

The port on which to have the HTTP server, for user login and administration. Type: 16 bit unsigned integer; between 0 and 65535 (both inclusive)

Default

17170

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.settings.http_url

The public URL of the server, for password reset links. Type: string

Default

"http://localhost"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.settings.ldap_base_dn

Base DN for LDAP. Type: string

Example

"dc=example,dc=com"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.settings.ldap_host

The host address that the LDAP server will be bound to. Type: string

Default

"::"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.settings.ldap_port

The port on which to have the LDAP server. Type: 16 bit unsigned integer; between 0 and 65535 (both inclusive)

Default

3890

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.settings.ldap_user_dn

Admin username Type: string

Default

"admin"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix

services.lldap.settings.ldap_user_email

Admin email. Type: string

Default

"admin@example.com"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/databases/lldap.nix