LLDAP
LLDAP: a first setup, important settings, verification, and recovery considerations.
Working directory: ~/homelab/core/directory. Follow the common setup workflow first. This is a setup note based on the linked documentation, not a copy of my live configuration or a runtime verification of this full stack.
Start here
LLDAP supplies a lightweight user directory through LDAP. It is not a reverse proxy or a complete single-sign-on system. Follow its container instructions and create only test users and groups initially. Add it when an application actually needs a shared directory.
Settings and data
Persist /data and keep configured signing/encryption secrets stable according to the selected release. Choose your own base DN and a limited service account for directory queries. Keep the LDAP interface private and protect transport as documented. Do not use the directory administrator as every application's bind account.
Check it
Create a test group and user. Configure one client application with the directory service name, base DN, and restricted bind account. Confirm the expected group grants access and an unrelated account does not. Then verify persistence after restart.
When something fails
An invalid-credentials error differs from an incorrect search base or filter. Check one at a time without posting passwords or directory exports. Back up the database and required keys together. An identity database contains personal information even if it has no public web route.