services:
  pocket-id-db:
    container_name: pocket-id-db
    image: docker.io/library/postgres:18.1@sha256:bfe50b2b0ddd9b55eadedd066fe24c7c6fe06626185b73358c480ea37868024d
    restart: unless-stopped
    environment:
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_DB=${POSTGRES_DB}
    volumes:
      - ${APPDATA_PATH}/pocket-id/db:/var/lib/postgresql/data
    networks:
      - backend
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s

  pocket-id:
    container_name: pocket-id
    image: ghcr.io/pocket-id/pocket-id:v2.0.1-distroless@sha256:fe24e1ef1c8d1da7753cfdeac3fc17c7fbcaec0fca369b2b10161dcf339a7bfb
    restart: unless-stopped
    depends_on:
      pocket-id-db:
        condition: service_healthy
    read_only: true
    user: ${PUID}:${PGID}
    environment:
      - APP_URL=${APP_URL}
      - TRUST_PROXY=${TRUST_PROXY}
      - MAXMIND_LICENSE_KEY=${MAXMIND_LICENSE_KEY}
      - PUID=${PUID}
      - PGID=${PGID}
      - ANALYTICS_DISABLED=${ANALYTICS_DISABLED}
      - DB_PROVIDER=postgres
      - DB_CONNECTION_STRING=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@pocket-id-db:5432/${POSTGRES_DB}
    volumes:
      - ${APPDATA_PATH}/pocket-id/data:/app/data
    ports:
      - ${PORT}:1411
    networks:
      - frontend
      - backend
    healthcheck:
      test: [ "CMD", "/app/pocket-id", "healthcheck" ]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s

networks:
  frontend:
    external: true
  backend:
    external: true