services:
  pocketid:
    image: ghcr.io/pocket-id/pocket-id:latest
    container_name: pocket-id
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: "0.5"
          memory: 512M
        reservations:
          cpus: "0.25"
          memory: 256M
    env_file: .env
    ports:
      - 11000:1411
    volumes:
      - /opt/stacks/pocketid/data:/app/data
    # Optional healthcheck  
    healthcheck:
      test: curl -f http://localhost:1411/healthz
      interval: 1m30s
      timeout: 5s
      retries: 2
      start_period: 10s
    labels:
      - "homepage.group=infrastructure"
      - "homepage.name=PocketID"
      - "homepage.icon=sh-pocket-id"
      - "homepage.href=https://id.nuclide.systems"
      - "homepage.instance.internal.href=http://192.168.1.40:11000"
      - "homepage.instance.public.href=https://id.nuclide.systems"