class profiles::phpldapadmin (
  String $nginx_server,
) {

  # TODO
  # include ::profiles::phpfpm

  class { 'phpldapadmin':
    auth_type => 'cookie',
  }

  nginx::resource::location { 'phpldapadmin':
    location       => '~ \.php$',
    server         => $nginx_server,
    fastcgi_params => 'snippets/fastcgi-php.conf',
    fastcgi        => 'unix:/run/php/php-fpm.sock',
    ssl            => true,
    ssl_only       => true,
    www_root       => '/usr/share/webapps/phpldapadmin',
    location_allow => [
      '127.0.0.1',
      '::1',
      "${facts['network6']}/${extlib::netmask_to_cidr($facts['netmask6'])}",
      "${facts['network']}/${extlib::netmask_to_cidr($facts['netmask'])}",
    ],
    location_deny => [
      'all',
    ],
  }

}