docker run -d --name hydra \
  -p 4444:4444 -p 4445:4445 \
  -e DSN=postgres://hydra:secret@postgres:5432/hydra \
  -e SECRETS_SYSTEM=change-me-32-chars-minimum!! \
  docker.io/oryd/hydra:latest serve all

docker run -d --name hydra \
  --restart unless-stopped \
  -p 4444:4444 -p 4445:4445 \
  -e DSN=postgres://hydra:secret@postgres.internal:5432/hydra?sslmode=require \
  -e SECRETS_SYSTEM=change-me-32-chars-minimum!! \
  -e URLS_SELF_ISSUER=https://oauth.example.com \
  -e URLS_LOGIN=https://idp.example.com/login \
  -e URLS_CONSENT=https://idp.example.com/consent \
  docker.io/oryd/hydra:v2.2.0 serve all

apiVersion: apps/v1
kind: Deployment
metadata:
  name: hydra
spec:
  replicas: 2
  selector:
    matchLabels:
      app: hydra
  template:
    metadata:
      labels:
        app: hydra
    spec:
      initContainers:
        - name: migrate
          image: docker.io/oryd/hydra:v2.2.0
          args: [migrate, sql, -e, "$(DSN)", --yes]
          envFrom:
            - secretRef:
                name: hydra-env
      containers:
        - name: hydra
          image: docker.io/oryd/hydra:v2.2.0
          args: [serve, all]
          ports:
            - containerPort: 4444
            - containerPort: 4445
          envFrom:
            - secretRef:
                name: hydra-env
---
apiVersion: v1
kind: Service
metadata:
  name: hydra-public
spec:
  selector:
    app: hydra
  ports:
    - port: 4444
      targetPort: 4444