docs(07): update backend.yaml.example with LDAP schema

config/backend.yaml.example

@@ -50,16 +50,49 @@ auth:
   # Environment: BACKEND_AUTH_JWT_SECRET_KEY or JWT_SECRET_KEY
   jwt_secret_key: "change_me_in_production"
 
+  # Enable LDAP Authentication?
+  # Default: false
+  # Environment: BACKEND_AUTH_LDAP_ENABLED or LDAP_ENABLED
+  ldap_enabled: false
+
   # LDAP Server address (optional)
-  # Example: "ldap://192.168.1.100"
-  # Environment: BACKEND_AUTH_LDAP_SERVER
+  # Example: "ldaps://192.168.1.100:636"
+  # Environment: BACKEND_AUTH_LDAP_SERVER or LDAP_SERVER
   ldap_server: ""
 
   # LDAP Base DN for user search
   # Example: "dc=example,dc=com"
-  # Environment: BACKEND_AUTH_LDAP_BASE_DN
+  # Environment: BACKEND_AUTH_LDAP_BASE_DN or LDAP_BASE_DN
   ldap_base_dn: ""
 
+  # LDAP User DN Template
+  # Example: "uid={username},ou=people,dc=example,dc=com"
+  # Environment: BACKEND_AUTH_LDAP_USER_TEMPLATE or LDAP_USER_TEMPLATE
+  ldap_user_template: "uid={username},ou=people,dc=ldap,dc=lan"
+
+  # LDAP Groups Base DN
+  # Example: "ou=groups,dc=example,dc=com"
+  # Environment: BACKEND_AUTH_LDAP_GROUPS_DN or LDAP_GROUPS_DN
+  ldap_groups_dn: "ou=groups"
+
+  # Use TLS for LDAP connection?
+  # Default: true
+  # Environment: BACKEND_AUTH_LDAP_USE_TLS or LDAP_USE_TLS
+  ldap_use_tls: true
+
+  # Ignore TLS certificate verification? (NOT FOR PRODUCTION)
+  # Default: false
+  # Environment: BACKEND_AUTH_LDAP_IGNORE_CERT or LDAP_IGNORE_CERT
+  ldap_ignore_cert: false
+
+  # LDAP Role Mappings (List of group-to-role mappings)
+  # assigned_role = None (if no match found)
+  ldap_role_mappings:
+    - group: "inventory_admins"
+      role: "admin"
+    - group: "inventory_users"
+      role: "user"
+
   # Path to store hashed passwords for offline use
   # Environment: BACKEND_AUTH_PASSWORD_CACHE_PATH
   password_cache_path: "data/.passwords"