pocket-id

Pocket-ID/.env

@@ -0,0 +1,6 @@
+# See the documentation for more information: https://pocket-id.org/docs/configuration/environment-variables
+PUBLIC_APP_URL=https://pocket-id.jimsgarage.co.uk
+TRUST_PROXY=true
+MAXMIND_LICENSE_KEY=
+PUID=1000
+PGID=1000

Pocket-ID/docker-compose.yaml

@@ -0,0 +1,34 @@
+services:
+  pocket-id:
+    image: ghcr.io/pocket-id/pocket-id
+    restart: unless-stopped
+    env_file: .env
+    ports:
+      - 3000:80
+    volumes:
+      - "./data:/app/backend/data"
+    # Optional healthcheck  
+    healthcheck:
+      test: "curl -f http://localhost/health"
+      interval: 1m30s
+      timeout: 5s
+      retries: 2
+      start_period: 10s
+    networks:
+      - proxy
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.pocket-id.entrypoints=http"
+      - "traefik.http.routers.pocket-id.rule=Host(`pocket-id.jimsgarage.co.uk`)"
+      - "traefik.http.middlewares.pocket-id-https-redirect.redirectscheme.scheme=https"
+      - "traefik.http.routers.pocket-id.middlewares=pocket-id-https-redirect"
+      - "traefik.http.routers.pocket-id-secure.entrypoints=https"
+      - "traefik.http.routers.pocket-id-secure.rule=Host(`pocket-id.jimsgarage.co.uk`)"
+      - "traefik.http.routers.pocket-id-secure.tls=true"
+      - "traefik.http.routers.pocket-id-secure.service=pocket-id"
+      - "traefik.http.services.pocket-id.loadbalancer.server.port=80"
+      - "traefik.docker.network=proxy"
+
+networks:
+  proxy:
+    external: true