Build [v1.14.9]

config/backend.yaml.example

@@ -50,16 +50,49 @@ auth:
   # Environment: BACKEND_AUTH_JWT_SECRET_KEY or JWT_SECRET_KEY
   jwt_secret_key: "change_me_in_production"
 
+  # Enable LDAP Authentication?
+  # Default: false
+  # Environment: BACKEND_AUTH_LDAP_ENABLED or LDAP_ENABLED
+  ldap_enabled: false
+
   # LDAP Server address (optional)
-  # Example: "ldap://192.168.1.100"
+  # Example: "ldaps://192.168.1.100:636"
-  # Environment: BACKEND_AUTH_LDAP_SERVER
+  # Environment: BACKEND_AUTH_LDAP_SERVER or LDAP_SERVER
   ldap_server: ""
 
   # LDAP Base DN for user search
   # Example: "dc=example,dc=com"
-  # Environment: BACKEND_AUTH_LDAP_BASE_DN
+  # Environment: BACKEND_AUTH_LDAP_BASE_DN or LDAP_BASE_DN
   ldap_base_dn: ""
 
+  # LDAP User DN Template
+  # Example: "uid={username},ou=people,dc=example,dc=com"
+  # Environment: BACKEND_AUTH_LDAP_USER_TEMPLATE or LDAP_USER_TEMPLATE
+  ldap_user_template: "uid={username},ou=people,dc=ldap,dc=lan"
+
+  # LDAP Groups Base DN
+  # Example: "ou=groups,dc=example,dc=com"
+  # Environment: BACKEND_AUTH_LDAP_GROUPS_DN or LDAP_GROUPS_DN
+  ldap_groups_dn: "ou=groups"
+
+  # Use TLS for LDAP connection?
+  # Default: true
+  # Environment: BACKEND_AUTH_LDAP_USE_TLS or LDAP_USE_TLS
+  ldap_use_tls: true
+
+  # Ignore TLS certificate verification? (NOT FOR PRODUCTION)
+  # Default: false
+  # Environment: BACKEND_AUTH_LDAP_IGNORE_CERT or LDAP_IGNORE_CERT
+  ldap_ignore_cert: false
+
+  # LDAP Role Mappings (List of group-to-role mappings)
+  # assigned_role = None (if no match found)
+  ldap_role_mappings:
+    - group: "inventory_admins"
+      role: "admin"
+    - group: "inventory_users"
+      role: "user"
+
   # Path to store hashed passwords for offline use
   # Environment: BACKEND_AUTH_PASSWORD_CACHE_PATH
   password_cache_path: "data/.passwords"

frontend/VERSION.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.14.8",
+  "version": "1.14.9",
   "last_build": "2026-04-23-1258",
   "codename": "ConfigCore",
-  "commit": "88e5d66f"
+  "commit": "33805cb7"
 }