---

ldap_client_config:
  - comment: Set the base DN
    option: BASE
    value: dc=example,dc=com
  - comment: Set the default URI
    option: URI
    value: ldapi:///
  - comment: Set the default bind DN
    option: BINDDN
    value: cn=admin,dc=example,dc=com
  - comment: Set the LDAP TLS truststore
    option: TLS_CACERT
    value: /etc/ssl/certs/truststore.pem

prosody_administrators:
  - john.doe@example.com

prosody_tls_key: /etc/ssl/private/xmpp.example.com.pem

prosody_tls_certificate: /etc/ssl/certs/xmpp.example.com.pem

prosody_domains:
  - example.com

prosody_ldap_server: ldap.example.com

prosody_ldap_bind_dn: cn=xmpp,ou=services,dc=example,dc=com

prosody_ldap_password: xmpp

prosody_ldap_filter: '(&(memberOf=cn=xmpp,ou=groups,dc=example,dc=com)(mail=$user@$host))'

prosody_ldap_scope: "onelevel"

prosody_ldap_tls: "true"

prosody_ldap_base: "ou=people,dc=example,dc=com"