From 487b73f0b36290df5a8ef8c11374a364dd417a03 Mon Sep 17 00:00:00 2001
From: Viktor Scharf <scharf.vi@gmail.com>
Date: Thu, 4 Sep 2025 11:37:06 +0200
Subject: [PATCH 1/2] set default admin password

---
 README.md             | 2 +-
 docker-compose.yml    | 2 +-
 idm/ldap-keycloak.yml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index 52e391c..7f694a6 100644
--- a/README.md
+++ b/README.md
@@ -67,7 +67,7 @@ OpenCloud Compose offers a modular approach to deploying OpenCloud with several
 5. **Access OpenCloud**:
    - URL: https://cloud.opencloud.test
    - Username: `admin`
-   - Password: Set via `INITIAL_ADMIN_PASSWORD` environment variable in your `.env` file
+   - Password: `admin` (by default). Set via `INITIAL_ADMIN_PASSWORD` environment variable in your `.env` file
 
 ### Production Deployment
 
diff --git a/docker-compose.yml b/docker-compose.yml
index e6846e9..59e721f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -28,7 +28,7 @@ services:
       # demo users
       IDM_CREATE_DEMO_USERS: "${DEMO_USERS:-false}"
       # admin password
-      IDM_ADMIN_PASSWORD: "${INITIAL_ADMIN_PASSWORD}"
+      IDM_ADMIN_PASSWORD: "${INITIAL_ADMIN_PASSWORD:-admin}"
       # email server (if configured)
       NOTIFICATIONS_SMTP_HOST: "${SMTP_HOST}"
       NOTIFICATIONS_SMTP_PORT: "${SMTP_PORT}"
diff --git a/idm/ldap-keycloak.yml b/idm/ldap-keycloak.yml
index b9f88e4..0b81622 100644
--- a/idm/ldap-keycloak.yml
+++ b/idm/ldap-keycloak.yml
@@ -38,7 +38,7 @@ services:
       IDP_DOMAIN: ${KEYCLOAK_DOMAIN:-keycloak.opencloud.test}
 
   ldap-server:
-    image: bitnami/openldap:2.6
+    image: bitnamilegacy/openldap:2.6
     networks:
       opencloud-net:
     entrypoint: [ "/bin/sh", "/opt/bitnami/scripts/openldap/docker-entrypoint-override.sh", "/opt/bitnami/scripts/openldap/run.sh" ]

From 1c1ccef59c6f886a252b84c3e4c996d9e2b2f877 Mon Sep 17 00:00:00 2001
From: Viktor Scharf <scharf.vi@gmail.com>
Date: Thu, 4 Sep 2025 12:38:17 +0200
Subject: [PATCH 2/2] change sequence of steps in readmi

---
 README.md          | 11 +++++++----
 docker-compose.yml |  2 +-
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 7f694a6..9152f02 100644
--- a/README.md
+++ b/README.md
@@ -40,7 +40,10 @@ OpenCloud Compose offers a modular approach to deploying OpenCloud with several
 
    > **Note**: The repository includes `.env.example` as a template with default settings and documentation. Your actual `.env` file is excluded from version control (via `.gitignore`) to prevent accidentally committing sensitive information like passwords and domain-specific settings.
 
-3. **Configure deployment options**:
+3. **Set admin password**:
+   set `INITIAL_ADMIN_PASSWORD=your_secure_password` environment variable in your `.env` file
+
+4. **Configure deployment options**:
 
    You can deploy using explicit `-f` flags:
    ```bash
@@ -57,17 +60,17 @@ OpenCloud Compose offers a modular approach to deploying OpenCloud with several
    docker compose up -d
    ```
 
-4. **Add local domains to `/etc/hosts`**:
+5. **Add local domains to `/etc/hosts`**:
    ```
    127.0.0.1 cloud.opencloud.test
    127.0.0.1 traefik.opencloud.test
    127.0.0.1 keycloak.opencloud.test
    ```
 
-5. **Access OpenCloud**:
+6. **Access OpenCloud**:
    - URL: https://cloud.opencloud.test
    - Username: `admin`
-   - Password: `admin` (by default). Set via `INITIAL_ADMIN_PASSWORD` environment variable in your `.env` file
+   - Password: value of your `INITIAL_ADMIN_PASSWORD`
 
 ### Production Deployment
 
diff --git a/docker-compose.yml b/docker-compose.yml
index 59e721f..e6846e9 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -28,7 +28,7 @@ services:
       # demo users
       IDM_CREATE_DEMO_USERS: "${DEMO_USERS:-false}"
       # admin password
-      IDM_ADMIN_PASSWORD: "${INITIAL_ADMIN_PASSWORD:-admin}"
+      IDM_ADMIN_PASSWORD: "${INITIAL_ADMIN_PASSWORD}"
       # email server (if configured)
       NOTIFICATIONS_SMTP_HOST: "${SMTP_HOST}"
       NOTIFICATIONS_SMTP_PORT: "${SMTP_PORT}"