first commit

2025-05-29 21:55:04 +02:00
parent 3884a9f9e9
commit a4c2dca44e
70 changed files with 3373 additions and 0 deletions
@@ -0,0 +1,46 @@
+{
+  "domain": "https://heslovnik.czech-tv.cz",
+  "sends_allowed": true,
+  "hibp_api_key": "jdvpetsk12",
+  "incomplete_2fa_time_limit": 3,
+  "disable_icon_download": false,
+  "signups_allowed": true,
+  "signups_verify": true,
+  "signups_verify_resend_time": 3600,
+  "signups_verify_resend_limit": 6,
+  "signups_domains_whitelist": "czech-tv.cz,ct.czech-tv.cz,ceskatelevize.cz",
+  "invitations_allowed": true,
+  "emergency_access_allowed": true,
+  "password_iterations": 100000,
+  "password_hints_allowed": true,
+  "show_password_hint": false,
+  "admin_token": " 2DcKWJtshWQejDL6ZPELxXeY",
+  "invitation_org_name": "ceskatelevize.cz",
+  "ip_header": "X-Real-IP",
+  "icon_redirect_code": 302,
+  "icon_cache_ttl": 2592000,
+  "icon_cache_negttl": 259200,
+  "icon_download_timeout": 10,
+  "icon_blacklist_non_global_ips": true,
+  "disable_2fa_remember": false,
+  "authenticator_disable_time_drift": false,
+  "require_device_email": false,
+  "reload_templates": false,
+  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
+  "_enable_yubico": true,
+  "_enable_duo": false,
+  "_enable_smtp": true,
+  "smtp_host": "mail.czech-tv.cz",
+  "smtp_security": "off",
+  "smtp_port": 25,
+  "smtp_from": "vaultwarden@ceskatelevize.cz",
+  "smtp_from_name": "vaultwarden",
+  "smtp_timeout": 30,
+  "smtp_embed_images": true,
+  "smtp_accept_invalid_certs": false,
+  "smtp_accept_invalid_hostnames": false,
+  "_enable_email_2fa": true,
+  "email_token_size": 6,
+  "email_expiration_time": 600,
+  "email_attempts_limit": 3
+}
@@ -0,0 +1,8 @@
+vaultwarden_url = "https://passbolt.czech-tv.cz"
+vaultwarden_admin_token = "admin"
+ldap_host = "ct.czech-tv.cz"
+ldap_bind_dn = "CN=Ldap ADReader,OU=ServisniUzivatele,OU=Admins,DC=ct,DC=czech-tv,DC=cz"
+ldap_bind_password = "Buchtickyses0do"
+ldap_search_base_dn = "DC=ct,DC=czech-tv,DC=cz"
+ldap_search_filter = "(&(objectClass=*)(uid=*))"
+ldap_sync_interval_seconds = 10
@@ -0,0 +1,34 @@
+version: '3'
+services:
+   vaultwarden:
+     restart: always
+     container_name: vaultwarden
+     image: vaultwarden/server:latest
+     volumes:
+       - /var/lib/valutwarden/:/data/
+       - /var/lib/valutwarden/:/data/logs
+     ports:
+       - 8080:80
+     environment:
+       - SMTP_HOST=mail.czech-tv.cz
+       - SMTP_FROM=vaultwarden@ceskatelevize.cz
+       - SMTP_FROM_NAME=vaultwarden
+       - SMTP_PORT=25
+       - SMTP_TIMEOUT=30
+       - LOGIN_RATELIMIT_MAX_BURST=10
+       - LOGIN_RATELIMIT_SECONDS=60
+       - SMTP_SECURITY=off
+       - DOMAIN=https://heslovnik.czech-tv.cz
+       - INVITATION_ORG_NAME=ceskatelevize.cz
+       - INVITATIONS_ALLOWED=true
+       - ADMIN_TOKEN= 2DcKWJtshWQejDL6ZPELxXeY
+       - SIGNUPS_ALLOWED=true
+       - SIGNUPS_DOMAINS_WHITELIST=czech-tv.cz,ct.czech-tv.cz,ceskatelevize.cz
+       - SIGNUPS_VERIFY=true
+       - SIGNUPS_VERIFY_RESEND_TIME=3600
+       - SIGNUPS_VERIFY_RESEND_LIMIT=6
+       - EMERGENCY_ACCESS_ALLOWED=true
+       - SENDS_ALLOWED=true
+       - WEB_VAULT_ENABLED=true
+       - TIME_ZONE="Europe/Prague"
+       - RUST_BACKTRACE=full
@@ -0,0 +1,47 @@
+---
+version: '3'
+services:
+  ldap_sync:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    volumes:
+      - ./example.config.toml:/config.toml:ro
+      # ./root.cert:/usr/src/vaultwarden_ldap/root.cert:ro
+    environment:
+      CONFIG_PATH: /config.toml
+      RUST_BACKTRACE: 1
+    depends_on:
+      - vaultwarden
+      - ldap
+    restart: always
+
+  vaultwarden:
+    image: vaultwarden/server
+    ports:
+      - 8000:80
+    environment:
+      ADMIN_TOKEN: admin
+      SIGNUPS_ALLOWED: 'false'
+      INVITATIONS_ALLOWED: 'true'
+      I_REALLY_WANT_VOLATILE_STORAGE: 'true'
+
+  ldap:
+    image: osixia/openldap
+    volumes:
+      - /var/lib/ldap
+      - /etc/ldap/slapd.d
+    environment:
+      LDAP_READONLY_USER: 'true'
+      LDAP_READONLY_USER_USERNAME: readonly
+      LDAP_READONLY_USER_PASSWORD: readonly
+
+  ldap_admin:
+    image: osixia/phpldapadmin
+    ports:
+      - 8001:80
+    environment:
+      PHPLDAPADMIN_HTTPS: 'false'
+      PHPLDAPADMIN_LDAP_HOSTS: ldap
+    depends_on:
+      - ldap