services:
  app:
    image: ghcr.io/pocket-id/pocket-id:latest
    environment:
      - APP_URL=https://auth.routinedevelopment.ca
      - APP_NAME=Routine Auth
      - TRUST_PROXY=true
      - PUID=1000
      - PGID=1000
      - ENCRYPTION_KEY=${ENCRYPTION_KEY}
      - DB_CONNECTION_STRING=${DB_CONNECTION_STRING}
      - ANALYTICS_DISABLED=true
    volumes:
      - pocket-id-data:/app/data
    networks:
      - dokploy-network
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.pocketid.rule=Host(`auth.routinedevelopment.ca`)"
      - "traefik.http.routers.pocketid.entrypoints=websecure"
      - "traefik.http.routers.pocketid.tls.certresolver=letsencrypt"
      - "traefik.http.services.pocketid.loadbalancer.server.port=1411"
    healthcheck:
      test: "curl -f http://localhost:1411/healthz"
      interval: 1m30s
      timeout: 5s
      retries: 2
      start_period: 10s
    restart: unless-stopped

volumes:
  pocket-id-data:

networks:
  dokploy-network:
    external: true