From 56bf5f741cbe784e1feb967f65a09ca21b5ce2c2 Mon Sep 17 00:00:00 2001
From: James Turland <james@turland.uk>
Date: Wed, 9 Apr 2025 12:53:51 +0100
Subject: [PATCH] pocket-id

---
 Pocket-ID/.env                |  6 ++++++
 Pocket-ID/docker-compose.yaml | 34 ++++++++++++++++++++++++++++++++++
 2 files changed, 40 insertions(+)
 create mode 100644 Pocket-ID/.env
 create mode 100644 Pocket-ID/docker-compose.yaml

diff --git a/Pocket-ID/.env b/Pocket-ID/.env
new file mode 100644
index 0000000..d4b0ac1
--- /dev/null
+++ b/Pocket-ID/.env
@@ -0,0 +1,6 @@
+# See the documentation for more information: https://pocket-id.org/docs/configuration/environment-variables
+PUBLIC_APP_URL=https://pocket-id.jimsgarage.co.uk
+TRUST_PROXY=true
+MAXMIND_LICENSE_KEY=
+PUID=1000
+PGID=1000
\ No newline at end of file
diff --git a/Pocket-ID/docker-compose.yaml b/Pocket-ID/docker-compose.yaml
new file mode 100644
index 0000000..3b61d9c
--- /dev/null
+++ b/Pocket-ID/docker-compose.yaml
@@ -0,0 +1,34 @@
+services:
+  pocket-id:
+    image: ghcr.io/pocket-id/pocket-id
+    restart: unless-stopped
+    env_file: .env
+    ports:
+      - 3000:80
+    volumes:
+      - "./data:/app/backend/data"
+    # Optional healthcheck  
+    healthcheck:
+      test: "curl -f http://localhost/health"
+      interval: 1m30s
+      timeout: 5s
+      retries: 2
+      start_period: 10s
+    networks:
+      - proxy
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.pocket-id.entrypoints=http"
+      - "traefik.http.routers.pocket-id.rule=Host(`pocket-id.jimsgarage.co.uk`)"
+      - "traefik.http.middlewares.pocket-id-https-redirect.redirectscheme.scheme=https"
+      - "traefik.http.routers.pocket-id.middlewares=pocket-id-https-redirect"
+      - "traefik.http.routers.pocket-id-secure.entrypoints=https"
+      - "traefik.http.routers.pocket-id-secure.rule=Host(`pocket-id.jimsgarage.co.uk`)"
+      - "traefik.http.routers.pocket-id-secure.tls=true"
+      - "traefik.http.routers.pocket-id-secure.service=pocket-id"
+      - "traefik.http.services.pocket-id.loadbalancer.server.port=80"
+      - "traefik.docker.network=proxy"
+
+networks:
+  proxy:
+    external: true
\ No newline at end of file