Run with Pocket ID

Run with Pocket ID

Note

• This guide assumes you have a running installation based on the quadlet files in main.
• This guide assumes that you already know how to set up an HTTPS site with a reverse proxy.

Pocket ID installation

Warning

Pocket ID requires a secure context, meaning it must be served over HTTPS. This is necessary because Pocket ID uses the WebAuthn API.

Create a file named pocketid.container in the /etc/containers/systemd directory, or in the ~/.config/containers/systemd/ directory when running rootless, with the following content:

[Unit]
Description=OIDC provider

[Container]
#AutoUpdate=registry
Image=ghcr.io/pocket-id/pocket-id:v2
PublishPort=1411:1411
Volume=pocket-id-data:/app/data:z
# See the documentation for more information: https://pocket-id.org/docs/configuration/environment-variables
# Generate with: openssl rand -base64 32
ENCRYPTION_KEY=
Environment=APP_URL=https://your-pocket-id-domain.com
Environment=TRUST_PROXY=true
Environment=MAXMIND_LICENSE_KEY=
Environment=PGID=1000
Environment=PUID=1000

[Service]
TimeoutStartSec=900

[Install]
WantedBy=default.target

Start with systemctl daemon-reload && systemctl start pocketid

Integrate in immich

Take a look at this guide: https://pocket-id.org/docs/client-examples/immich