rabbitmq.config

[
  {rabbit, [{auth_backends, [rabbit_auth_backend_internal, rabbit_auth_backend_ldap]}]},
  {rabbitmq_auth_backend_ldap,
   [ {servers,               ["%LDAP_SERVER%"]},
     {dn_lookup_bind,        {"cn=rabbitmq,ou=services,dc=wot,dc=io", "%RABBITMQ_PASSWORD%"}},
     {dn_lookup_attribute,   "uid"},
     {dn_lookup_base,        "dc=wot,dc=io"},
     {use_starttls,          true},
     {port,                  389},
     {timeout,               10000},
     {log,                   false},
     {vhost_access_query,    {'or', [
                                     {'in_group', "cn=rabbitmq-admins,ou=groups,dc=wot,dc=io"},
                                     {'in_group', "cn=rabbitmq-readonly,ou=groups,dc=wot,dc=io"}
                                    ]}},
     {resource_access_query,
      {for, [{permission, configure, {in_group, "cn=rabbitmq-admins,ou=groups,dc=wot,dc=io"}},
             {permission, write,
              {for, [{resource, queue,    {in_group, "cn=rabbitmq-admins,ou=groups,dc=wot,dc=io"}},
                     {resource, exchange, {constant, true}}]}},
             {permission, read,
              {for, [{resource, exchange, {'or', [
                                                  {'in_group', "cn=rabbitmq-admins,ou=groups,dc=wot,dc=io"},
                                                  {'in_group', "cn=rabbitmq-readonly,ou=groups,dc=wot,dc=io"}
                                          ]}},
                     {resource, queue,    {constant, true}}]}}
            ]
      }},
     {tag_queries,           [{administrator, {'in_group', "cn=rabbitmq-admins,ou=groups,dc=wot,dc=io"}},
                              {management,    {constant, true}}]}
   ]
  }
].