Run OpenLDAP in Docker

I followed this recipe and migrated most of the lam_proxy labels to lam because I don’t use Auth proxies (traefik-forward-auth instead). It gives me a Bad Gateway error and in Traefik (v1.7) logs I have “dial Connect: Connection Refused”. Docker-inspect shows that both containers are connected to both networks with IP addresses. I’ve tried all manner of manipulating the traefik labels but can’t seem to get it to work. Any ideas?

My docker-compose is below:

version: '3'

services:
  openldap:
    image: osixia/openldap
    env_file: /share/appdata/config/openldap/openldap.env
    command: --loglevel debug
    networks:
      - traefik_public
      - auth_internal
    volumes:
      - /share/runtime/openldap/:/var/lib/ldap
      - /share/appdata/config/openldap/openldap/:/etc/ldap/slapd.d

  lam:
    image: jacksgt/ldap-account-manager
    env_file: /share/appdata/config/openldap/openldap.env
    networks:
      - traefik_public
      - auth_internal
    deploy:
      labels:
        - traefik.frontend.rule=Host:lam.DOMAIN.TLD
        - traefik.docker.network=traefik_public
        - traefik.port=80
        - traefik.frontend.auth.forward.address=http://traefik-forward-auth:4181
        - traefik.frontend.auth.forward.authResponseHeaders=X-Forwarded-User
        - traefik.frontend.auth.forward.trustForwardHeader=true
    volumes:
      - /share/appdata/config/openldap/lam/config/config.cfg:/var/www/html/config/config.cfg
      - /share/appdata/config/openldap/lam/config/FamilyProfile.conf:/var/www/html/config/FamilyProfile.conf

networks:
  traefik_public:
    external: true

  auth_internal:
    external: true