Pocket-ID

Pocket-ID

Official

Docker app from grtgbln's Repository

Overview

A simple OIDC provider that allows users to authenticate with their passkeys to your services.

Runtime arguments

Web UI
http://[IP]:[PORT:1411]/
Network
bridge
Privileged
false

Template configuration

WebUI PortPorttcp

Port to access WebUI

Target
1411
Default
1411
Value
1411
App URLVariable

The URL where you will access the app. Recommended to change from default.

Target
APP_URL
Default
http://localhost
Value
http://localhost
Behind ProxyVariable

Whether the app is behind a reverse proxy.

Target
TRUST_PROXY
Default
false|true
Encryption KeyVariable

A secure random key used for encrypting sensitive data. Generate with `openssl rand -base64 32`

Target
ENCRYPTION_KEY=
Maxmind License KeyVariable

License Key for the GeoLite2 Database. If the key is not provided, IP locations will be marked as unknown in audit logs.

Target
MAXMIND_LICENSE_KEY
Disable UI ConfigurationVariable

Disable the ability to configure the app via the UI. If enabled, you must set all required environment variables. See documentation: https://pocket-id.org/docs/configuration/environment-variables/#overriding-the-ui-configuration

Target
UI_CONFIG_DISABLED
Default
false|true
Database - ProviderVariable

The database provider to use.

Target
DB_PROVIDER
Default
sqlite|postgres
Database - Connection StringVariable

The connection string for the database. If using SQLite, this should be left as is.

Target
DB_CONNECTION_STRING
Default
file:data/pocket-id.db?_pragma=journal_mode(WAL)&_pragma=busy_timeout(2500)&_txlock=immediate
Value
file:data/pocket-id.db?_pragma=journal_mode(WAL)&_pragma=busy_timeout(2500)&_txlock=immediate
Upload PathVariable

Path inside the container where uploaded files are stored

Target
UPLOAD_PATH
Default
data/uploads
Value
data/uploads
Keys PathVariable

Path inside the container where keys are stored

Target
KEYS_PATH
Default
data/keys
Value
data/keys
GeoLite2 Database PathVariable

Path to the GeoLite2 database file.

Target
GEOLITE_DB_PATH
Default
data/GeoLite2-City.mmdb
Value
data/GeoLite2-City.mmdb
GeoLite2 Download LinkVariable

The URL to download the GeoLite2 database.

Target
GEOLITE_DB_URL
Default
https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-City&license_key=%s&suffix=tar.gz
Value
https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-City&license_key=%s&suffix=tar.gz
Internal PortVariabletcp

The port inside the container on which the server should listen. Not recommended to change.

Target
PORT
Default
1411
Value
1411
Internal HostVariable

The host inside the container on which the server should listen. Not recommended to change.

Target
HOST
Default
0.0.0.0
Value
0.0.0.0
Data PathPathrw

Data directory

Target
/app/data
Default
/mnt/user/appdata/pocket-id/data
Value
/mnt/user/appdata/pocket-id/data
PUIDVariable
Default
099
Value
099
PGIDVariable
Default
100
Value
100

Details

Repository
ghcr.io/pocket-id/pocket-id:latest
Last Updated2026-05-31
First Seen2025-03-15

Run Pocket-ID on Unraid.

Pocket-ID is listed in Community Apps for Unraid OS. Explore Unraid to build a flexible home server, NAS, or homelab.