[Unit]
Description=Postgres DB server

[Container]
Image=docker.io/postgres:17
Environment=POSTGRES_PASSWORD=heeeeeymacarena
Volume=my-data.volume:/var/lib/postgresql/data:z
PublishPort=5432:5432/tcp
HostName=antonberg
Network=xnat.network
Exec=sh -c "mkdir -p /etc/ldap \
        && echo TLS_CACERT /var/lib/postgresql/data/my-ca.crt >/etc/ldap/ldap.conf \
        && /usr/local/bin/docker-entrypoint.sh postgres"

[Service]
Restart=always
TimeoutStartSec=900

[Install]
WantedBy=multi-user.target default.target




hostssl my-database my-username    10.4.5.6/32        ldap ldapserver="server1.arpa server2.arpa" ldapprefix="uid=" ldapsuffix=",cn=users,cn=accounts,dc=arpa" ldapscheme="ldaps"