docker: add healtchecks (#709)

Reviewed-on: #709
Co-authored-by: Michael Grote <michael.grote@posteo.de>
Co-committed-by: Michael Grote <michael.grote@posteo.de>

docker-compose/mail-relay/docker-compose.yml.j2

@@ -1,25 +1,30 @@
 version: '3.3'
 services:
-    postfix:
+  postfix:
-      image: "registry.mgrote.net/postfix:master@sha256:fa2af0bc8edacfff05be461370c1591d480ae48ce3027a8322f80dba950cb9a7"
+    image: "registry.mgrote.net/postfix:master@sha256:fa2af0bc8edacfff05be461370c1591d480ae48ce3027a8322f80dba950cb9a7"
-      container_name: mail-relay
+    container_name: mail-relay
-      restart: always
+    restart: always
-      labels:
+    labels:
-        com.centurylinklabs.watchtower.enable: true
+      com.centurylinklabs.watchtower.enable: true
-      ports:
+    ports:
-          - 1025:25
+        - 1025:25
-      environment:
+    environment:
-        SMTP_SERVER: smtp.strato.de
+      SMTP_SERVER: smtp.strato.de
-        SMTP_USERNAME: info@mgrote.net
+      SMTP_USERNAME: info@mgrote.net
-        SMTP_PASSWORD: "{{ lookup('keepass', 'strato_smtp_password', 'password') }}"
+      SMTP_PASSWORD: "{{ lookup('keepass', 'strato_smtp_password', 'password') }}"
-        SERVER_HOSTNAME: mgrote.net
+      SERVER_HOSTNAME: mgrote.net
-        # DEBUG: "yes" # literal
+      # DEBUG: "yes" # literal
-        ALWAYS_ADD_MISSING_HEADERS: "no" # literal
+      ALWAYS_ADD_MISSING_HEADERS: "no" # literal
-        # LOG_SUBJECT: "yes" # literal
+      # LOG_SUBJECT: "yes" # literal
-        INET_PROTOCOL: ipv4
+      INET_PROTOCOL: ipv4
-        SMTP_GENERIC_MAP: "/.*/ info@mgrote.net"
+      SMTP_GENERIC_MAP: "/.*/ info@mgrote.net"
-      networks:
+    networks:
-        - mail-relay
+      - mail-relay
+    healthcheck:
+      test: ["CMD", "sh", "-c", "echo 'EHLO localhost' | nc -w 1 localhost 25 | grep -q '220 '"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
 
 ######## Networks ########
 networks:

docker-compose/miniflux/docker-compose.yml.j2

@@ -21,6 +21,8 @@ services:
     networks:
       - intern
       - traefik
+    healthcheck:
+      test: ["CMD", "/usr/bin/miniflux", "-healthcheck", "auto"]
     labels:
       traefik.http.routers.miniflux.rule: Host(`miniflux.mgrote.net`)
       traefik.enable: true
@@ -46,6 +48,10 @@ services:
       - db16:/var/lib/postgresql/data
     networks:
       - intern
+    healthcheck:
+      test: ["CMD", "pg_isready", "-U", "miniflux"]
+      interval: 10s
+      start_period: 30s
     labels:
       com.centurylinklabs.watchtower.enable: true
 

docker-compose/registry/docker-compose.yml.j2

@@ -13,6 +13,11 @@ services:
     depends_on:
       - oci-registry-ui
       - oci-registry-redis
+    healthcheck:
+      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:5000/v2/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
     environment:
       TZ: Europe/Berlin
       REGISTRY_AUTH: none
@@ -61,6 +66,11 @@ services:
       MAXMEMORY POLICY: allkeys-lru
     labels:
       com.centurylinklabs.watchtower.enable: true
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
 
   oci-registry-ui:
     restart: always
@@ -77,6 +87,11 @@ services:
     networks:
       - traefik
       - intern
+    healthcheck:
+      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
     labels:
       traefik.http.routers.registry-ui.rule: Host(`registry.mgrote.net`)&&PathPrefix(`/ui`) # mache unter /ui erreichbar, damit wird demPfad dieser Prefix hinzugefügt, die Anwendung "hört" dort abrer nicht
       traefik.http.routers.registry-ui.middlewares: registry-ui-strip-prefix,registry-ui-ipwhitelist # also entferne den Prefix danach wieder

docker-compose/unifi-network-application/docker-compose.yml.j2

@@ -34,6 +34,11 @@ services:
     networks:
       - mail-relay
       - unifi-internal
+    healthcheck:
+      test: ["CMD", "curl", "-f", "--insecure", "https://localhost:8443"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
 
   unifi-db:
     # Starte Container OHNE init-script
@@ -52,6 +57,11 @@ services:
       com.centurylinklabs.watchtower.enable: true
     networks:
       - unifi-internal
+    healthcheck:
+      test: ["CMD", "mongosh", "--eval", "db.stats().ok"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
 
 ######## Volumes ########
 volumes: