{config, pkgs, ...}:

{
  services.openldap = {
    enable = true;
    dataDir = "/var/lib/openldap";
    rootpwFile = "/etc/nixos/secret/openldaproot.pw";
    suffix = "o=bib3,c=DE";
    rootdn = "cn=admin,o=bib3,c=DE";
    declarativeContents = ''
      dn: o=bib3, c=DE
      objectclass: organization

      dn: ou=users, o=bib3, c=DE
      objectclass: organizationalUnit
      ou: users

      dn: cn=test, ou=users, o=bib3, c=DE
      objectclass: person
      cn: test
      sn: test
    '';
  };
}