root
40 lines
1.0 KiB
INI
40 lines
1.0 KiB
INI
[Unit]
|
|
Description=FreeIPA Server with Integrated DNS
|
|
After=network-online.target
|
|
|
|
[Container]
|
|
Image=gitea.iot.cudanet.org/administrator/quadlets/freeipa-server:fedora-rawhide-4.13.1
|
|
ContainerName=freeipa
|
|
HostName=ipa.iot.cudanet.org
|
|
|
|
# Network Configuration
|
|
Network=podman-bridge0
|
|
IP=10.0.0.141
|
|
PublishPort=53/udp
|
|
PublishPort=53/tcp
|
|
PublishPort=80/tcp
|
|
PublishPort=443/tcp
|
|
PublishPort=389/tcp
|
|
PublishPort=636/tcp
|
|
PublishPort=88/tcp
|
|
PublishPort=88/udp
|
|
PublishPort=464/tcp
|
|
PublishPort=464/udp
|
|
PublishPort=123/udp
|
|
|
|
# Security and Resources
|
|
ReadOnly=true
|
|
Sysctl=net.ipv4.ip_unprivileged_port_start=53
|
|
Memory=4096m
|
|
Volume=/var/podman/freeipa/data:/data:Z
|
|
|
|
# Arguments
|
|
# Added --setup-dns and --forwarder (using common public DNS as examples)
|
|
Exec=-U -n iot.cudanet.org -r IOT.CUDANET.ORG --hostname=ipa.iot.cudanet.org --setup-dns --forwarder=8.8.8.8 --forwarder=1.1.1.1 --no-host-dns --no-ntp -p e9532a79-417c-4689-b89e-fa9b61b40d4a -a e9532a79-417c-4689-b89e-fa9b61b40d4a --ip-address=10.0.0.141
|
|
|
|
[Service]
|
|
Restart=always
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target default.target
|