From adcbd19c97f503b0f4544b71ea10940bdcd8f69c Mon Sep 17 00:00:00 2001
From: Marijn Doeve <marijn@doeve.me>
Date: Mon, 9 Feb 2026 19:55:11 +0100
Subject: [PATCH] Add PocketId

---
 pocketid/compose.yaml | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 pocketid/compose.yaml

diff --git a/pocketid/compose.yaml b/pocketid/compose.yaml
new file mode 100644
index 0000000..ac6186a
--- /dev/null
+++ b/pocketid/compose.yaml
@@ -0,0 +1,31 @@
+services:
+  pocket-id:
+    image: ghcr.io/pocket-id/pocket-id:v2
+    restart: unless-stopped
+    environment:
+      APP_URL: https://idp.marijndoeve.nl
+      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
+      TRUST_PROXY: true
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.pocketid.rule=Host(`idp.marijndoeve.nl`)
+      - traefik.http.routers.pocketid.entrypoints=websecure
+      - traefik.http.routers.pocketid.tls.certresolver=marijndoeve
+    volumes:
+      - "data:/app/data"
+    healthcheck:
+      test: [ "CMD", "/app/pocket-id", "healthcheck" ]
+      interval: 1m30s
+      timeout: 5s
+      retries: 2
+      start_period: 10s
+
+    networks:
+      - web
+
+volumes:
+  data:
+
+networks:
+  web:
+    external: true