zzorica/selfservicepassword repository overview

⁠selfservicepassword

Containerized PHP application for LDAP password management. User reset or change, reset by email or sms, enforce password security policy, security questions, set user ssh key etc.

• Instalation⁠
• Quickstart⁠
• Kubernetes⁠
• Configuration parameters⁠

⁠Introduction

Docker image that provides web interface to change and reset password in an LDAP directory. Base image is php:7.2-apache and PHP application is the one at https://github.com/ltb-project/self-service-password⁠

⁠Installation

Use build image from Dockerhub:

docker pull zzorica/selfservicepassword:latest

Or you can build your own using this repo with:

docker build -t zzorica/selfservicepassword github.com/zzorica/selfservicepassword

⁠Quickstart

To start the container this is the minimum needed to pass to docker run. Of course generate your own string for keyphrase.

docker run -d -p 8080:80 -e SSP_KEYPHRASE="OoSaiFeeChee3jeiphai5Aevae1ahRie" --name ssp zzorica/selfservicepassword:latest

Now you can access it on http://localhost:8080. Rest of the variables and their defaults are in table below.

⁠Kubernetes

Example of kubernetes deployment of ssp service can be found in examples/k8s folder. All passwords are setup using secrets, and service is exposed via ClusterIP. You can access it for example via ingress. Depending on your cluster environment of course. Depending on your ingress rules don't forget to adjust apache variables to reflect those rules (SSP_HOSTNAME and SSP_SERVER_PATH).

Also SSP_LOGO and SSP_BACKGROUND_IMAGE environment variables are set to empty string so it doesn't use default images. Looks much cleaner.

⁠Configuration parameters

Variables are all taken from PHP app defined in the file conf/config.inc.local.php so take a look at that file, which is commented quite well, for any extra explanation. Some defaults are changed to reflect average use (in my opinion that is). So here is the list of all the env variables that are available to be passed to the container:

⁠Variables related to apache setup

⁠Variables related to selfservicepassword PHP application