services:
  pocketid:
    image: ghcr.io/pocket-id/pocket-id:v2
    container_name: pocketid
    restart: unless-stopped
    ports:
      - "8001:1411"
    environment:
      - APP_URL=https://auth.{{ domain }}
      - TRUST_PROXY=true
      - DATABASE_URL=file:/app/data/pocket-id.db
      - ENCRYPTION_KEY={{ pocketid_encryption_key }}
      - LOG_LEVEL=debug
      - SESSION_DURATION=63072000 # 2 years
    volumes:
      - /data/pocket-id:/app/data
    healthcheck:
      test: [ "CMD", "/app/pocket-id", "healthcheck" ]
      interval: 1m30s
      timeout: 5s
      retries: 2
      start_period: 10s