from outside the container:
./insecure_generate_tls.sh
docker run --rm -it -p8443:8443 \
-v /tmp/kanidm/:/tmp/kanidm/ \
ghcr.io/kanidm/kanidmd:devel bash
from inside the container
cat > /server-open.toml <<- 'EOF'
bindaddress = "0.0.0.0:8443"
ldapbindaddress = "0.0.0.0:3636"
db_fs_type = "zfs"
db_path = "/tmp/kanidm/kanidm.db"
tls_chain = "/tmp/kanidm/chain.pem"
tls_key = "/tmp/kanidm/key.pem"
# log_level = "perfbasic"
# log_level = "quiet"
log_level = "verbose"
domain = "idm.example.com"
origin = "https://idm.example.com:8443"
EOF
kanidmd recover_account -n idm_admin -c /server-open.toml | grep Success
kanidmd recover_account -n admin -c /server-open.toml | grep Success
kanidmd server -c /server-open.toml