From 80002d1a486dd0b2dd0480acb108d34c36563e94 Mon Sep 17 00:00:00 2001
From: admin <alec@bryanmail.net>
Date: Thu, 25 Jun 2026 22:55:32 -0700
Subject: [PATCH] refactor(mealie): parameterize domain, LDAP, and DB
 connection values

---
 mealie.yaml | 21 ++++++++++-----------
 1 file changed, 10 insertions(+), 11 deletions(-)

diff --git a/mealie.yaml b/mealie.yaml
index ae8c4ba..170b8b5 100755
--- a/mealie.yaml
+++ b/mealie.yaml
@@ -10,7 +10,6 @@ services:
       - postgresql_db-backend
     volumes:
       - /volume1/docker/Mealie/app/data:/app/data/
-     # - /volume1/docker/letsencrypt/certs/certs/homehub.bryanmail.net.crt:/app/cert/homehub.bryanmail.net.crt
     environment:
     # Set Backend ENV Variables Here
       - ALLOW_SIGNUP=true
@@ -19,27 +18,27 @@ services:
       - TZ=America/Anchorage
       - MAX_WORKERS=1
       - WEB_CONCURRENCY=1
-      - BASE_URL=https://mealie.bryanmail.net
+      - BASE_URL=https://food.${DOMAIN}
 
     # Database Settings
       - DB_ENGINE=postgres
       - POSTGRES_USER=mealie
       - POSTGRES_PASSWORD_FILE=/run/secrets/mealie_db_password
-      - POSTGRES_SERVER=postgresql
-      - POSTGRES_PORT=5432
+      - POSTGRES_SERVER=${POSTGRES_HOST}
+      - POSTGRES_PORT=${POSTGRES_PORT}
       - POSTGRES_DB=mealie-v1
 
     #LDAP Settings
       - LDAP_AUTH_ENABLED=TRUE
-      - LDAP_SERVER_URL=ldap://homehub.bryanmail.net
+      - LDAP_SERVER_URL=ldap://${LDAP_HOST}
       - LDAP_TLS_INSECURE=TRUE
-     # - LDAP_TLS_CACERTFILE=/app/cert/homehub.bryanmail.net.crt
+      # - LDAP_TLS_CACERTFILE=/app/cert/${LDAP_HOST}.crt
       - LDAP_ENABLE_STARTTLS=TRUE
-      - LDAP_BASE_DN=DC=bryanmail,DC=net
-      - LDAP_QUERY_BIND=CN=AVB,OU=AAD Sync,OU=House Members,OU=Topside Pinnacle,DC=bryanmail,DC=net
+      - LDAP_BASE_DN=${LDAP_BASE_DN}
+      - LDAP_QUERY_BIND=${LDAP_QUERY_BIND}
       - LDAP_QUERY_PASSWORD_FILE=/run/secrets/mealie_ldap_query_password
-     # - LDAP_USER_FILTER=(memberOf=OU=AAD Sync,OU=House Members,OU=Topside Pinnacle,DC=bryanmail,DC=net)
-      - LDAP_ADMIN_FILTER=(memberOf=OU=AAD Sync,OU=House Members,OU=Topside Pinnacle,DC=bryanmail,DC=net)
+      # - LDAP_USER_FILTER=(memberOf=${LDAP_ADMIN_GROUP})
+      - LDAP_ADMIN_FILTER=(memberOf=${LDAP_ADMIN_GROUP})
       - LDAP_ID_ATTRIBUTE=sAMAccountName
       - LDAP_NAME_ATTRIBUTE=displayName
       - LDAP_MAIL_ATTRIBUTE=mail
@@ -51,7 +50,7 @@ services:
     deploy:
       labels:
         - traefik.enable=true
-        - traefik.http.routers.mealie.rule=Host(`food.bryanmail.net`)
+        - traefik.http.routers.mealie.rule=Host(`food.${DOMAIN}`)
         - traefik.http.routers.mealie.tls=true
         - traefik.http.routers.mealie.tls.certresolver=letsencrypt
         - traefik.http.routers.mealie.entrypoints=websecure