Time Tracking
Made Simple

# docker-compose.yml
services:
  app:
    image: klokkme/klokk:stable  # or ghcr.io/klokk-me/klokk:stable
    container_name: klokk_app
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp
    cap_drop: [ALL]
    security_opt:
      - no-new-privileges:true
    pids_limit: 200
    ports:
      - "8080:8080"
    environment:
      ACCEPT_TERMS: "true"   # accepts the terms of use: https://klokk.me/terms
      SESSION_SECRET: "change-me-min-32-chars"
      CSRF_KEY: "change-me-min-32-chars"
      DATA_KEY: "change-me-min-32-chars"   # required: change it before the first start, then never change or lose it
      BASE_URL: "http://localhost:8080"
      SESSION_SECURE_COOKIE: "false"
    volumes:
      - app_data:/app/data

volumes:
  app_data:

# docker-compose.yml
services:
  app:
    image: klokkme/klokk:stable  # or ghcr.io/klokk-me/klokk:stable
    container_name: klokk_app
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp
    cap_drop: [ALL]
    security_opt:
      - no-new-privileges:true
    pids_limit: 200
    ports:
      - "8080:8080"
    environment:
      ACCEPT_TERMS: "true"   # accepts the terms of use: https://klokk.me/terms
      DB_DRIVER: "postgres"
      DB_DSN: "postgres://klokk:changeme@postgres:5432/klokk?sslmode=disable"
      SESSION_SECRET: "change-me-min-32-chars"
      CSRF_KEY: "change-me-min-32-chars"
      DATA_KEY: "change-me-min-32-chars"   # required: change it before the first start, then never change or lose it
      BASE_URL: "http://localhost:8080"
    depends_on:
      postgres:
        condition: service_healthy

  postgres:
    image: postgres:18-alpine
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /var/run/postgresql
      - /tmp
    cap_drop: [ALL]
    cap_add: [CHOWN, DAC_OVERRIDE, FOWNER, SETGID, SETUID]
    security_opt:
      - no-new-privileges:true
    environment:
      POSTGRES_DB: klokk
      POSTGRES_USER: klokk
      POSTGRES_PASSWORD: changeme
    volumes:
      - pgdata:/var/lib/postgresql
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U klokk -d klokk"]
      interval: 10s
      timeout: 5s
      retries: 5

volumes:
  pgdata: