freeipa

2026-05-10 07:18:20 -07:00
parent a978cc341e
commit f7c53702d8
10 changed files with 57 additions and 11 deletions
@@ -0,0 +1,29 @@
+[Unit]
+Description=FreeIPA Server
+After=network-online.target
+
+[Container]
+Image=gitea.iot.cudanet.org/administrator/quadlets/freeipa-server:almalinux-9-4.12.2
+ContainerName=freeipa-server
+Network=podman-bridge0:ip=10.0.0.141
+
+Environment=IPA_DM_PASSWORD=SIssy123!!
+Environment=IPA_ADMIN_PASSWORD=SIssy123!!
+
+PodmanArgs=--systemd=always --hostname=ipa.iot.cudanet.org --cgroupns=host --security-opt label=disable --add-host ipa.iot.cudanet.org:10.0.0.141
+
+# ADDED: --no-host-dns and --no-ntp to prevent local enrollment crashes
+Exec=ipa-server-install -U -r IOT.CUDANET.ORG -p SIssy123!! -a SIssy123!! --no-ntp --no-host-dns
+
+Volume=/var/podman/freeipa/data:/data:Z
+AddCapability=CAP_SYS_ADMIN
+AddCapability=CAP_NET_ADMIN
+
+[Service]
+Notify=false
+Restart=on-failure
+RestartSec=30
+TimeoutStartSec=1800
+
+[Install]
+WantedBy=multi-user.target