wmantly 28016376ad feat: propagate CFG_LDAPS_HOST through setup and document LDAPS networking (#71) ...

Pass optional CFG_LDAPS_HOST from setup.env through setup.sh into the
generated ./config/sso-secrets.js as ldap.ldapsHost. This lets operators
advertise an internal-only LDAPS hostname (e.g. ldap.internal.example.com
or sso-manager) on the SSO /integrations page instead of the public
OAuth issuer, avoiding a public 636 port forward.

- setup.env.example: add CFG_LDAPS_HOST
- setup.sh: read/forward CFG_LDAPS_HOST into sso-secrets.js
- config.example/sso-secrets.js.example: document ldapsHost/ldapsPort
- .env.example: add LDAPS_HOST for legacy .env migrations
- docker-compose.yml: comment warning against public 636 forwarding
- README.md: explain CFG_LDAPS_HOST recommendation
- CHANGELOG.md + bump version to 1.1.19

Co-authored-by: Claude <noreply@anthropic.com>

2026-07-19 01:14:03 -04:00

..

proxy-secrets.js.example

chore(release): public-release readiness fixes for 1.1.18

2026-07-18 22:11:13 -04:00

sso-secrets.js.example

feat: propagate CFG_LDAPS_HOST through setup and document LDAPS networking (#71)

2026-07-19 01:14:03 -04:00