Mealie With OpenLDAP

Configuration is done solely with environmental variables in the mealie-api docker-compose config:

Note

LDAP integration in Mealie currently only works with the nightly branch, so hkotel/mealie:api-nightly and hkotel/mealie:frontend-nightly rather than the current “stable” release of v1.0.0beta-5

Configuration

The following config should let you login with either members of the mealie group as a user, or as an admin user with members of the mealie-admin group.

Mealie first checks credentials in the mealie group to authenticate, then checks for the presence of the user in the mealie-admin group and elevates that account to admin status if present, therefore for any account to be an admin account it must belong in both the mealie group and the mealie-admin group.

It is recommended to create a readonly_user and add them to the ldap_strict_readonly group to bind with.

            - LDAP_AUTH_ENABLED=true
            - LDAP_SERVER_URL=ldap://ldap:389
            - LDAP_TLS_INSECURE=true ## Only required for LDAPS with a self-signed certificate
            - LDAP_BASE_DN=ou=people,dc=example,dc=com
            - LDAP_USER_FILTER=(memberof=cn=mealie,ou=groups,dc=example,dc=com)
            - LDAP_ADMIN_FILTER=(memberof=cn=mealie-admin,ou=groups,dc=example,dc=com)
            - LDAP_QUERY_BIND=cn=readonly_user,ou=people,dc=example,dc=com
            - LDAP_QUERY_PASSWORD=READONLY_USER_PASSWORD
            - LDAP_ID_ATTRIBUTE=uid
            - LDAP_NAME_ATTRIBUTE=displayName
            - LDAP_MAIL_ATTRIBUTE=mail