LDAP Self Service Docker Image

---

This docker image is designed to be behind a reverse-proxy. The proxy will be the service that provides ingress logging and HTTPS termination. NodeRED serves the the Self-Service site on HTTP/80 at the / path with /admin path available for administering the flows. If when starting the docker container you specify an environmental variable of NODE_RED_CREDENTIAL_SECRET it will be used by NodeRED to decrypt your flows_cred.json file.

Data for the container is stored in two volumes /data and /usr/src/node-red. The repo does contain a flows_cred.json file, however this is our credential file. It's recommended that you log into the flows admin and set the credentials to your desired values. Export it and as part of the deployment process, mount a read-only copy of your flows_cred.json file to path /data/flows_cred.json within the container.

Security

Path /admin should not be made publically available, as access to this path grants full access to the backend as well as access to passwords and secrets from your flows_cred.json file.

Features

• NPM packages passport passport-keycloak-oauth2-oidc

  Used for keycloak authentication on admin interface

Docker Hub

Info

The docker image is available via docker pull nofusscomputing/ldap-selfservice available tags are detailed below

Available tags for the docker image is as follows:

• dev The current working head of the repositories development branch.

• {\d}.{\d}.{\d}rc{\d} The tag on the repositories development branch.

• {\d}.{\d}.{\d} The tag on the repositories master branch. considered stable

• latest The current working head of the repositories master branch. considered stable

Flow Credentials

You can edit these from within the flow administration or use the included scripts and manually edit the json file. Within the container these scripts are stored in /bin as such can be called from any path. To decrypt flows_cred,json use decrypt-flows-cred.sh /data (you will be prompted for the decryption password) and this will output a file called flows_cred.json.tmp containing the decrypted flows_cred.json. to encrypt the temp flows_cred.json.tmp back into flows_cred.json use command encrypt-flows-cred.sh /data, (you will be prompted for the encryption password)

About:

This page forms part of our Project LDAP Self Service.

Page Metadata

Version: ToDo: place files short git commit here
Date Created: 2023-08-15
Date Edited: 2026-01-06

Contribution:

Would You like to contribute to our LDAP Self Service project? You can assist in the following ways:

• Edit This Page If there is a mistake or a way you can improve it.
• Add a Page to the Manual if you would like to add an item to our manual
• Raise an Issue if there is something about this page you would like to improve, and git is unfamiliar to you.

 

ToDo: Add the page list of contributors