Redid networking

modules/services/openldap.nix

@@ -50,10 +50,7 @@ in
     virtualisation.oci-containers.containers.openldap = {
       image = cfg.image;
 
-      # No ports mapping — --network=host means the container shares the host
-      # network stack. OpenLDAP binds to 0.0.0.0:389, but the firewall
-      # (common.nix) only opens 22/80/443, so port 389 is unreachable from
-      # the LAN or internet.
+      ports = [ "127.0.0.1:${toString cfg.port}:389" ];
 
       environment = {
         LDAP_ORGANISATION  = homeyConfig.organization;
@@ -78,7 +75,7 @@ in
       ];
 
       extraOptions = [
-        "--network=host"
+        "--network=homey"
         "--env-file=/run/openldap-secrets.env"
       ];
     };
@@ -113,8 +110,8 @@ in
       # Clean up the env file on stop
       postStop = "rm -f /run/openldap-secrets.env";
       # Wait for the external HD to be mounted before starting
-      after    = lib.mkAfter  [ "mnt-data.mount" ];
-      requires = lib.mkAfter  [ "mnt-data.mount" ];
+      after    = lib.mkAfter  [ "mnt-data.mount" "podman-homey-network.service" ];
+      requires = lib.mkAfter  [ "mnt-data.mount" "podman-homey-network.service" ];
     };
 
     # -----------------------------------------------------------------------