mart-w/kanidm
1
0
Fork 0
mirror of https://github.com/kanidm/kanidm.git synced 2025-02-23 20:47:01 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add net bind service docs (#1070)

Browse source
This commit is contained in:
Firstyear 2022-09-21 13:51:23 +10:00 committed by GitHub
parent 657cefb4f1
commit ad468f0dfa
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 15 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
examples/server_container.toml
View file

@ -1,10 +1,12 @@
# The webserver bind address. Will use HTTPS if tls_*
# is provided.
# is provided. If set to 443 you may require the
# NET_BIND_SERVICE capability.
# Defaults to "127.0.0.1:8443"
bindaddress = "[::]:8443"
#
# The read-only ldap server bind address. The server
# will use LDAPS if tls_* is provided.
# will use LDAPS if tls_* is provided. If set to 636
# you may require the NET_BIND_SERVICE capability.
# Defaults to "" (disabled)
# ldapbindaddress = "[::]:3636"
#

11
kanidm_book/src/server_configuration.md
View file

@ -35,5 +35,14 @@ Then you can setup the initial admin account and initialise the database into yo
Now we can run the server so that it can accept connections. This defaults to using `-c /data/server.toml`
docker run -p 8443:8443 -v kanidmd:/data kanidm/server:latest
docker run -p 443:8443 -v kanidmd:/data kanidm/server:latest
### Using the NET\_BIND\_SERVICE capability
If you plan to run without using docker port mapping or some other reverse proxy, and your bindaddress
or ldapbindaddress port is less than `1024` you will need the `NET_BIND_SERVICE` in docker to allow
these port binds. You can add this with `--cap-add` in your docker run command.
docker run --cap-add NET_BIND_SERVICE --network [host OR macvlan OR ipvlan] \
-v kanidmd:/data kanidm/server:latest