# For the moment, the LDAP password need to be in ldap.toml
# In the future, we will be able to make a secret
# See https://github.com/grafana/grafana/pull/17526

version: "3.7"

services:
  grafana:
    image: grafana/grafana
    environment:
      - GF_SERVER_ROOT_URL=https://grafana.auro.re
      - GF_SESSION_COOKIE_SECURE=true
      - GF_ANALYTICS_REPORTING_ENABLED=false
      - GF_SNAPSHOTS_EXTERNAL_ENABLED=false
      - GF_USERS_ALLOW_SIGN_UP=false
      - GF_USERS_ALLOW_ORG_CREATE=false
      - GF_AUTH_BASIC_ENABLED=false
      - GF_AUTH_LDAP_ENABLED=true
      - GF_AUTH_LDAP_CONFIG_FILE=/etc/grafana/ldap.toml

      # Install Grafana plugins at startup
      - GF_INSTALL_PLUGINS=grafana-worldmap-panel
    volumes:
      - ./data_grafana:/var/lib/grafana
      - ./ldap.toml:/etc/grafana/ldap.toml:ro
    ports:
      - 8082:3000
    restart: always