LiftTrace

services:
  lifttrace:
    image: ghcr.io/traceapps/lifttrace:latest
    container_name: lifttrace
    ports:
      - "3002:3002"
    volumes:
      - ${DATA_DB_PATH}:/data/db
      - ${DATA_UPLOADS_PATH}:/data/uploads
    environment:
      - DB_PATH=/data/db/lifttrace.db
      - UPLOADS_PATH=/data/uploads
      # Required if using user management — set a long random secret
      - JWT_SECRET=${JWT_SECRET}
      # Or mount a Swarm/Docker secret and set JWT_SECRET_FILE=/run/secrets/<name>
      # If you're serving over plain HTTP (LAN-only, no reverse proxy with TLS),
      # uncomment the next line. Without it, browsers reject the auth cookie and
      # every request returns 401 after a successful login.
      # - INSECURE_COOKIES=1
      # Optional — at-rest encryption key for OIDC client secrets and wearable
# ...