OpenLDAP Architecture¶
Compose 🐳¶
flowchart LR
none["svc-db-openldap declares no service"]
Swarm 🐝¶
flowchart LR
none["svc-db-openldap declares no service"]
Volumes¶
flowchart LR
vol_data["openldap_data"]
vol_data -->|"role is manager-pinned"| local_data["node-local on the manager"]:::local
vol_config["openldap_config"]
vol_config -->|"role is manager-pinned"| local_config["node-local on the manager"]:::local
classDef shared fill:#e6f4ea,stroke:#137333,color:#0b2e13;
classDef local fill:#fef7e0,stroke:#b06000,color:#3d2600;
Condition |
Effect |
|---|---|
swarm, |
shared over NFS |
any one of those missing |
node-local |
All four conditions must hold, so pinning a role takes every one of its volumes node-local. Only the role’s primary entry counts as pinned here: a placement on any other service pins that service alone and leaves the backing of every volume unchanged. The chain is drawn rather than its result, because that coupling is what makes a placement change move data without saying so.
Dependencies¶
flowchart LR
subgraph deps [Dependencies]
dep_svc_bkp_volume_2_local["svc-bkp-volume-2-local 💻"]
dep_svc_net_tor["svc-net-tor 🐳🐝"]
dep_web_app_docs["web-app-docs 🐳🐝"]
end
subgraph role [svc-db-openldap 🐳🐝]
svc_openldap["openldap"]
svc_tor["tor"]
svc_container_backup["container_backup"]
svc_docs["docs"]
end
subgraph dependents [Dependents]
dpt_web_app_akaunting["web-app-akaunting 🐳🐝"]
dpt_web_app_bigbluebutton["web-app-bigbluebutton 🐳🐝"]
dpt_web_app_bluesky["web-app-bluesky 🐳🐝"]
dpt_web_app_checkmk["web-app-checkmk 🐳🐝"]
dpt_web_app_discourse["web-app-discourse 🐳🐝"]
dpt_web_app_erpnext["web-app-erpnext 🐳🐝"]
dpt_web_app_espocrm["web-app-espocrm 🐳🐝"]
dpt_web_app_flowise["web-app-flowise 🐳🐝"]
dpt_web_app_friendica["web-app-friendica 🐳🐝"]
dpt_web_app_funkwhale["web-app-funkwhale 🐳🐝"]
dpt_web_app_fusiondirectory["web-app-fusiondirectory 🐳🐝"]
dpt_web_app_gitea["web-app-gitea 🐳🐝"]
dpt_web_app_jellyfin["web-app-jellyfin 🐳🐝"]
dpt_web_app_jenkins["web-app-jenkins 🐳🐝"]
dpt_web_app_jitsi["web-app-jitsi 🐳🐝"]
dpt_web_app_joomla["web-app-joomla 🐳🐝"]
dpt_web_app_keycloak["web-app-keycloak 🐳🐝"]
dpt_web_app_kix["web-app-kix 🐳🐝"]
dpt_web_app_lam["web-app-lam 🐳🐝"]
dpt_web_app_matrix["web-app-matrix 🐳🐝"]
dpt_web_app_mattermost["web-app-mattermost 🐳🐝"]
dpt_web_app_minio["web-app-minio 🐳🐝"]
dpt_web_app_moodle["web-app-moodle 🐳🐝"]
dpt_web_app_nextcloud["web-app-nextcloud 🐳🐝"]
dpt_web_app_odoo["web-app-odoo 🐳🐝"]
dpt_web_app_openbao["web-app-openbao 🐳🐝"]
dpt_web_app_opencloud["web-app-opencloud 🐳🐝"]
dpt_web_app_openproject["web-app-openproject 🐳🐝"]
dpt_web_app_opentalk["web-app-opentalk 🐳🐝"]
dpt_web_app_openwebui["web-app-openwebui 🐳🐝"]
dpt_web_app_penpot["web-app-penpot 🐳🐝"]
dpt_web_app_phpldapadmin["web-app-phpldapadmin 🐳🐝"]
dpt_web_app_seaweedfs["web-app-seaweedfs 🐳🐝"]
dpt_web_app_semaphore["web-app-semaphore 🐳🐝"]
dpt_web_app_shopware["web-app-shopware 🐳🐝"]
dpt_web_app_snipe_it["web-app-snipe-it 🐳🐝"]
dpt_web_app_suitecrm["web-app-suitecrm 🐳🐝"]
dpt_web_app_taiga["web-app-taiga 🐳🐝"]
dpt_web_app_wazuh["web-app-wazuh 🐳🐝"]
dpt_web_app_xwiki["web-app-xwiki 🐳🐝"]
dpt_web_app_zammad["web-app-zammad 🐳🐝"]
dpt_web_svc_xmpp["web-svc-xmpp 🐳🐝"]
end
dep_svc_bkp_volume_2_local -. "0..1" .-> svc_container_backup
dep_svc_net_tor -. "0..1" .-> svc_tor
dep_web_app_docs -. "0..1" .-> svc_docs
svc_openldap -- "0..0" --> dpt_web_app_akaunting
svc_openldap -- "1:1" --> dpt_web_app_bigbluebutton
svc_openldap -- "0..0" --> dpt_web_app_bluesky
svc_openldap -. "0..1" .-> dpt_web_app_checkmk
svc_openldap -- "0..0" --> dpt_web_app_discourse
svc_openldap -. "0..1" .-> dpt_web_app_erpnext
svc_openldap -. "0..1" .-> dpt_web_app_espocrm
svc_openldap -- "0..0" --> dpt_web_app_flowise
svc_openldap -. "0..1" .-> dpt_web_app_friendica
svc_openldap -. "0..1" .-> dpt_web_app_funkwhale
svc_openldap -- "1:1" --> dpt_web_app_fusiondirectory
svc_openldap -. "0..1" .-> dpt_web_app_gitea
svc_openldap -. "0..1" .-> dpt_web_app_jellyfin
svc_openldap -. "0..1" .-> dpt_web_app_jenkins
svc_openldap -. "0..1" .-> dpt_web_app_jitsi
svc_openldap -- "0..0" --> dpt_web_app_joomla
svc_openldap -. "0..1" .-> dpt_web_app_keycloak
svc_openldap -. "0..1" .-> dpt_web_app_kix
svc_openldap -- "1:1" --> dpt_web_app_lam
svc_openldap -. "0..1" .-> dpt_web_app_matrix
svc_openldap -- "1:1" --> dpt_web_app_mattermost
svc_openldap -. "0..1" .-> dpt_web_app_minio
svc_openldap -. "0..1" .-> dpt_web_app_moodle
svc_openldap -. "0..1" .-> dpt_web_app_nextcloud
svc_openldap -. "0..1" .-> dpt_web_app_odoo
svc_openldap -. "0..1" .-> dpt_web_app_openbao
svc_openldap -. "0..1" .-> dpt_web_app_opencloud
svc_openldap -. "0..1" .-> dpt_web_app_openproject
svc_openldap -- "0..0" --> dpt_web_app_opentalk
svc_openldap -. "0..1" .-> dpt_web_app_openwebui
svc_openldap -. "0..1" .-> dpt_web_app_penpot
svc_openldap -- "1:1" --> dpt_web_app_phpldapadmin
svc_openldap -- "0..0" --> dpt_web_app_seaweedfs
svc_openldap -. "0..1" .-> dpt_web_app_semaphore
svc_openldap -. "0..1" .-> dpt_web_app_shopware
svc_openldap -. "0..1" .-> dpt_web_app_snipe_it
svc_openldap -. "0..1" .-> dpt_web_app_suitecrm
svc_openldap -. "0..1" .-> dpt_web_app_taiga
svc_openldap -. "0..1" .-> dpt_web_app_wazuh
svc_openldap -- "0..0" --> dpt_web_app_xwiki
svc_openldap -. "0..1" .-> dpt_web_app_zammad
svc_openldap -. "0..1" .-> dpt_web_svc_xmpp
linkStyle 3,5,7,10,18,31,35,42 stroke:red;
Symbol |
Meaning |
|---|---|
|
fixed relationship |
|
conditional, enabled only in matching deployments |
|
declared but turned off in this role |
💻 |
deploys to the host |
🐳 |
deploys under compose |
🐝 |
deploys under swarm |
❌ |
service explicitly turned off |
⚙️ |
Ansible role dependency from |
Every dependency and dependent is listed; the graph is not truncated.