That would probably the best practice. But as another post said, I don’t trust myself (and I lack the skills, although that’s pretty lame excuse).

I used this as a solid base. It’s more flexible than the AIO containers. Annoying thing about NC is that, as far as I can tell, none of the LDAP settings are exposed as environmental variables.