Update .env and compose.yaml for environment variable management and configuration

services/pocket-id/.env

@@ -3,7 +3,27 @@
 #COMPOSE_PROJECT_NAME= // only use in multiple deployments on the same infra
 #Find Specific Variables in documentation https://stonith404.github.io/pocket-id/configuration/environment-variables
 SERVICE=pocket-id
-IMAGE_URL=ghcr.io/pocket-id/pocket-id
+IMAGE_URL=ghcr.io/pocket-id/pocket-id:v2
 SERVICEPORT=1411
 TS_AUTHKEY=
 DNS_SERVER=9.9.9.9
+
+
+# See the documentation for more information: https://pocket-id.org/docs/configuration/environment-variables
+
+# These variables must be configured for your deployment:
+APP_URL=https://pocket-id.<YOUR-TAILSCALE-DOMAIN>.ts.net
+
+# Encryption key (choose one method):
+# Method 1: Direct key (simple but less secure)
+# Generate with: openssl rand -base64 32
+ENCRYPTION_KEY=
+# Method 2: File-based key (recommended)
+# Put the base64 key in a file and point to it here.
+# ENCRYPTION_KEY_FILE=/path/to/encryption_key
+
+# These variables are optional but recommended to review:
+TRUST_PROXY=true
+MAXMIND_LICENSE_KEY=
+PUID=1000
+PGID=1000

services/pocket-id/compose.yaml

@@ -51,13 +51,7 @@ services:
     image: ${IMAGE_URL} # Image to be used
     network_mode: service:tailscale # Sidecar configuration to route ${SERVICE} through Tailscale
     container_name: app-${SERVICE} # Name for local container management
-    environment:
-      - PUID=1000
-      - PGID=1000
-      - TZ=Europe/Amsterdam
-      #- PUBLIC_APP_URL=https://pocket-id.<your-ts-domain>.ts.net
-      #- TRUST_PROXY=yes
-      #- MAXMIND_LICENSE_KEY=
+    env_file: .env
     volumes:
       - ./${SERVICE}-data:/app/backend/data
     depends_on: