sudo apt update
sudo apt install -y docker-ce docker-ce-cli containerd.io
sudo groupadd docker
sudo usermod -aG docker $USER   # log out/in once
mkdir -p ~/glpi-stack && cd ~/glpi-stack

MYSQL_ROOT_PASSWORD=glpiRootP@ss
MYSQL_DATABASE=glpidb
MYSQL_USER=glpiuser
MYSQL_PASSWORD=glpiP@ss

version: "3.8"

services:
  db:
    image: mariadb:10.7    # version tested by the GLPI community :contentReference[oaicite:4]{index=4}
    container_name: glpi-db
    env_file: .mariadb.env
    volumes:
      - db_data:/var/lib/mysql
    restart: unless-stopped

  glpi:
    image: diouxx/glpi:latest              # widely used community image :contentReference[oaicite:5]{index=5}
    container_name: glpi-app
    depends_on:
      - db
    environment:
      - TZ=Australia/Melbourne             # adjust as needed
    ports:
      - "8080:80"                          # browse http://<host>:8080
    volumes:
      - glpi_files:/var/www/html/glpi      # keeps plugins & uploads
    restart: unless-stopped

volumes:
  db_data:
  glpi_files:

docker compose up -d          # starts both containers in background
docker compose ps             # confirm healthy state

server {
    listen 80;
    server_name ticket.greenhuang.local;

    # forward every request to GLPI container on the same host
    location / {
        proxy_pass http://127.0.0.1:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    # optional: basic security hardening
    add_header X-Frame-Options SAMEORIGIN;
    add_header X-Content-Type-Options nosniff;
}

sudo ln -s /etc/nginx/sites-available/ticket /etc/nginx/sites-enabled/

sudo nginx -t              # syntax check

sudo systemctl reload nginx

greenhuang
xVK3UhFrc2jzsFj

Note: Replace the highlighted orange information with your own details

	Connection Filter: 
			(&(objectCategory=person)(objectclass=user))
		or

			(&(objectClass=user)(objectCategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))

	BaseDN: ou=departments,dc=ttc,dc=local

	RootDN: [email protected]

	Login Field: samaccountname

	Synchronization Filed: objectguid