For a single app's own "LDAP authentication" settings — see Connecting a 3rd-party app or container for a field-by-field walkthrough (Gitea, generic Docker LDAP_* env vars, …).

LDAPS URL

Base DN

User search base

Group search base

User filter

Username attribute

Example bind DN

A read-only bind account — create it as a plain user via Users (don't put it in app_sso_admin or any other privileged group).

For full host login, SSH keys, and sudo via LDAP (not just one app) — clone theta42/ldap-client and run this on the host. Fill in the bind account's password and, if you want this host's access/sudo groups auto-registered, an API token from your Profile.