← Templates · Identity & Access
PI
Pocket ID
CommunitySimple, self-hosted OIDC provider that only supports passkey login — no passwords, ever.
| Runs | pocketid/pocket-id:v2.18.0 |
|---|---|
| Stack | go |
| Provisioned for it | Nothing, it's self-contained |
| Verified | Not yet |
Why deploy on Railyard
Railyard runs it standalone on a server you already pay for — no addons to provision, with zero-downtime deploys and scaling still included.
Deploying Pocket ID is one piece of a bigger stack you can keep building — add a database, a worker, a cache, or another app, all on the same servers you already pay for.
Good for
- A simple OIDC provider for self-hosted apps that only need passkey login
- Replacing password-based login with passkeys across several internal services
- A lighter alternative to Keycloak or Ory Hydra for small setups
Good to know
- Passkeys require HTTPS — make sure APP_URL matches the real, HTTPS-accessible URL or WebAuthn registration fails
- SQLite by default — database and uploads live on the mounted volume