diff --git a/pocketid/compose.yaml b/pocketid/compose.yaml
new file mode 100644
index 0000000..5072cea
--- /dev/null
+++ b/pocketid/compose.yaml
@@ -0,0 +1,31 @@
+services:
+  pocket-id:
+    image: ghcr.io/pocket-id/pocket-id:v2
+    restart: unless-stopped
+    environment:
+      APP_URL: https://idp.marijndoeve.nl
+      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
+      TRUST_PROXY: true
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.planka.rule=Host(`idp.marijndoeve.nl`)
+      - traefik.http.routers.planka.entrypoints=websecure
+      - traefik.http.routers.planka.tls.certresolver=marijndoeve
+    volumes:
+      - "data:/app/data"
+    healthcheck:
+      test: [ "CMD", "/app/pocket-id", "healthcheck" ]
+      interval: 1m30s
+      timeout: 5s
+      retries: 2
+      start_period: 10s
+
+    networks:
+      - web
+
+volumes:
+  data:
+
+networks:
+  web:
+    external: true