clusterDomain: "c1.k8s.ooo"
fqdn: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.{{ .Values.clusterDomain }}"
identifier: "{{ .Release.Name }}"

ldap:
  # See https://www.openldap.org/doc/admin24/slapdconf2.html section 5.2.1.2;
  logLevel: "256"
  organisation: "ungleich glarus ag"
  domain: "{{ tpl .Values.fqdn . }}"
  adminPasswordSecretRef: "{{ tpl .Values.identifier . }}-openldap"
  adminPasswordSecretKey: "LDAP_ADMIN_PASSWORD"
  enableReplication: false
  replicationHosts: ""
  replicationConfigSyncprov: 'binddn=\"cn=admin,cn=config\" bindmethod=simple credentials=$$LDAP_CONFIG_PASSWORD searchbase=\"cn=config\" type=refreshAndPersist retry=\"60 +\" timeout=1 starttls=no'
  replicationDbSyncprov: 'binddn=\"cn=admin,$$LDAP_BASE_DN\" bindmethod=simple credentials=$$LDAP_ADMIN_PASSWORD searchbase=\"$$LDAP_BASE_DN\" type=refreshAndPersist interval=00:00:00:10 retry=\"60 +\" timeout=1 starttls=no'

# TLS certificate generation.
letsencryptEmail: "technik@ungleich.ch"
letsencryptStaging: false