From 229b74b7ac99bf3ce25af8c499354e0b8d352d94 Mon Sep 17 00:00:00 2001
From: Yuki Saijo <sa1j0y26@gmail.com>
Date: Mon, 5 Jan 2026 15:47:49 +0900
Subject: [PATCH] =?UTF-8?q?=F0=9F=93=9Adocs:=20ldap-url-failover?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pages/docs/configuration/authentication/ldap.mdx | 5 +++--
 pages/docs/configuration/dotenv.mdx              | 4 ++--
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/pages/docs/configuration/authentication/ldap.mdx b/pages/docs/configuration/authentication/ldap.mdx
index 31ad50caf..06d0b0d38 100644
--- a/pages/docs/configuration/authentication/ldap.mdx
+++ b/pages/docs/configuration/authentication/ldap.mdx
@@ -11,12 +11,13 @@ You can use a Lightweight Directory Access Protocol (LDAP) authentication server
 
 **Basic Configuration**
 
-- `LDAP_URL` and `LDAP_USER_SEARCH_BASE` are required.
+- `LDAP_URL` and `LDAP_USER_SEARCH_BASE` are required. `LDAP_URL` supports a comma-separated list for multiple servers.
+- Multiple URLs are tried in order on connection failures; authentication or search failures do not fall back.
 - `LDAP_SEARCH_FILTER` is optional; if not specified, the `mail` attribute is used by default. If specified, use the literal `{{username}}` to use the given username for the search.
 
 <OptionTable
   options={[
-    ['LDAP_URL', 'string', 'LDAP server URL.', 'LDAP_URL=ldap://localhost:389'],
+    ['LDAP_URL', 'string', 'LDAP server URL (comma-separated list supported).', 'LDAP_URL=ldap://localhost:389,ldap://localhost:3891'],
     ['LDAP_BIND_DN', 'string', 'Bind DN', 'LDAP_BIND_DN=cn=root'],
     ['LDAP_BIND_CREDENTIALS', 'string', 'Password for bindDN', 'LDAP_BIND_CREDENTIALS=password'],
     [
diff --git a/pages/docs/configuration/dotenv.mdx b/pages/docs/configuration/dotenv.mdx
index 5fcb5fc10..e463ee547 100644
--- a/pages/docs/configuration/dotenv.mdx
+++ b/pages/docs/configuration/dotenv.mdx
@@ -1243,7 +1243,7 @@ For more information: **[LDAP/AD Authentication](/docs/configuration/authenticat
 
 <OptionTable
     options={[
-        ['LDAP_URL', 'string', 'LDAP server URL.', 'LDAP_URL=ldap://localhost:389'],
+        ['LDAP_URL', 'string', 'LDAP server URL (comma-separated list supported).', 'LDAP_URL=ldap://localhost:389,ldap://localhost:3891'],
         ['LDAP_BIND_DN', 'string', 'Bind DN', 'LDAP_BIND_DN=cn=root'],
         ['LDAP_BIND_CREDENTIALS', 'string', 'Password for bindDN', 'LDAP_BIND_CREDENTIALS=password'],
         [
@@ -1483,4 +1483,4 @@ Notes:
 - Leader election requires Redis to be enabled (`USE_REDIS=true`).
 - These settings are only relevant for multi-instance deployments.
 - The leader lease must be renewed before expiration to maintain leadership.
-- If lease renewal fails after max attempts, the instance will relinquish leadership.
\ No newline at end of file
+- If lease renewal fails after max attempts, the instance will relinquish leadership.