networks:
  proxy:
    external: true

volumes:
  data:

services:
  pocket-id:
    image: ghcr.io/pocket-id/pocket-id:v1
    container_name: pocket-id
    restart: unless-stopped
    labels:
      traefik.enable: true
      traefik.port: 1411
      traefik.http.routers.pocket-id.rule: Host(`id.4d6178.work`)
      traefik.http.routers.pocket-id.entrypoints: websecure
      traefik.http.routers.pocket-id.tls: true
      traefik.http.routers.pocket-id.tls.certresolver: le
    volumes:
      - data:/app/data
    networks:
      - proxy
    environment:
      APP_URL: https://id.4d6178.work
      TRUST_PROXY: true
      PUID: 1000
      PGID: 1000
    healthcheck:
      test:
        - CMD
        - /app/pocket-id
        - healthcheck
      interval: 1m30s
      timeout: 5s
      retries: 2
      start_period: 10s