{ config, pkgs, ... }:

let
  base = "dc=fudo,dc=org";
  ldap = import ../config/fudo/ldap.nix;

in {

  imports = [
    ../config/fudo/ldap.nix
  ];

  services.openldap = {
    enable = true;
    suffix = base;
    rootdn = "cn=admin,${base}";
    rootpwFile = "/srv/ldap/secure/root.pw";
  };
}