# This file is managed by Helm
#
# See also
# https://www.exim.org/exim-html-current/doc/html/spec_html/ch-file_and_database_lookups.html#SECTldap

ldap_default_servers = {{ tpl (required ".Values.ldap.server must be set" .Values.ldap.server) . }}
LDAP_BASE = {{ required ".Values.ldap.base must be set" .Values.ldap.base }}

MAIN_KEEP_ENVIRONMENT = LDAPURI : LDAPBASE : LDAPTLS_CRLCHECK : LDAP_USER : LDAP_PASSWORD : LDAPTLS_CACERT

{{- if .Values.ldap.tls.enabled }}
ldap_start_tls = true
# TODO: ldap_require_cert = demand ?
ldap_require_cert = allow
{{- else }}
ldap_start_tls = false
ldap_require_cert = never
{{- end }}

# Local Variables:
# mode: conf-space
# compile-command: "make -C ../../../.. diff"
# End:
