pinkpixeldev/pocket repository overview

⁠Pocket

Pocket is a private, self-hosted bookmark manager built for a home server or NAS. Paste a link, and Pocket fetches the title, description, favicon, and preview image in the background.

Everything is stored locally in a single SQLite database with cached media files beside it. There are no external database dependencies, no separate background workers, and no third-party accounts required.

• GitHub repository: github.com/pinkpixel-dev/pocket⁠
• Documentation: github.com/pinkpixel-dev/pocket/tree/main/DOCS⁠

⁠Highlights

• Instant save with background enrichment: Paste a URL and Pocket saves it immediately. Metadata and preview image fetches run in the background, so slow sites never hang your browser.
• Real card previews and fallbacks: Caches Open Graph and Twitter Card images locally. Links without preview images get a fallback card with site initials, favicon, and a domain-matched color.
• Custom covers: Upload an image, drag one onto the dialog, or paste an image link to replace missing or poor previews. Removing a cover uncovers the original fetched preview.
• Accent colors: Choose from eight interface accent colors in Settings (Gold, Blue, Red, Green, Cyan, Purple, Pink, Teal) with automatic logo tinting.
• Optional AI filing: Connect an OpenAI key to fill in missing titles, descriptions, tags, and collections without touching anything you entered manually.
• Bulk actions: Enter selection mode from cards or table rows to delete dead links, move batches into collections, or sort selected links with AI directly from your library.
• Collections and tags: Organize bookmarks into single collections and multiple tags, with search across titles, URLs, descriptions, and tags.
• Backlog triage: Tidy up messy collections and tags with AI, and file large backlogs of uncollected links in 40-item chunks with interactive review before anything is applied.
• Mobile PWA: Install Pocket as a standalone app on your phone or tablet home screen.
• Import and export: Import browser HTML bookmarks with folders preserved as collections. Export to browser-compatible HTML or structured JSON.

⁠Quick start

⁠With Docker Run

Run the container with a persistent directory mounted to /data:

mkdir -p data

docker run -d \
  --name pocket \
  --restart unless-stopped \
  -p 8420:8420 \
  -v ./data:/data \
  pinkpixeldev/pocket:latest

Open http://localhost:8420 (or http://<your-server-ip>:8420) in your browser.

⁠With Docker Compose

Create a compose.yml file:

services:
  pocket:
    image: pinkpixeldev/pocket:latest
    container_name: pocket
    restart: unless-stopped
    ports:
      - '8420:8420'
    volumes:
      - ./data:/data
    environment:
      - TZ=UTC
      # Optional: set OpenAI API key from the environment
      # - POCKET_OPENAI_API_KEY=your-api-key

Start the service:

docker compose up -d

⁠Persistent storage

Pocket stores all data under the /data mount point:

/data
├── pocket.db          SQLite database (all bookmarks, tags, collections, settings)
├── pocket.db-wal      SQLite write-ahead log
├── pocket.db-shm      SQLite shared memory file
├── previews/          Locally cached website preview images
├── favicons/          Locally cached website favicons
└── covers/            User-uploaded custom covers and images

Backing up the data/ folder backs up your entire bookmark library. Note that covers/ holds images you uploaded directly, so ensure it is included in your backup routine.

⁠File permissions

The container runs by default as the non-root node user (uid: 1000, gid: 1000).

If your host volume or NAS share is owned by a different user account, set the user in your compose file or docker run command:

user: '1026:100'

Ensure the host data directory is writable by that user before starting the container.

⁠Environment variables

Every variable is optional and has a sensible default.

⁠Network and security

Pocket has its own sign-in. The first person to open it creates the owner account, and the owner adds everyone else from Settings. Each account gets its own bookmarks, collections, tags and AI settings, so several people can share one container without sharing a library.

It still serves plain HTTP, so put it on a trusted home network or a private VPN such as Tailscale or WireGuard. To reach it over the public internet, place it behind a reverse proxy that terminates HTTPS, such as Caddy, Traefik or nginx.

Pocket includes connect-time SSRF protection. When fetching metadata for saved links, Pocket inspects DNS answers and literal IP addresses to refuse connections to loopback, RFC 1918 private subnets, carrier-grade NAT, and link-local addresses.

⁠Architectures and tags

Images are built for both linux/amd64 and linux/arm64.