apps: add Docker healthchecks + document coverage

- Add healthchecks across apps/*/docker-compose.yml (HTTP/TCP/pid/process probes)
- postgresql: pg_isready; mosquitto: $SYS uptime (note if auth required)
- ollama: add hostname; mdns-repeater: add hostname
- docs/apps-compose-healthchecks.md: table + intentionally skipped services
- docs/core.md: link to healthcheck doc

Made-with: Cursor

Author: romkey

apps/access-control-webhook/docker-compose.yml

@@ -17,6 +17,12 @@ services:
       - "com.centurylinklabs.watchtower.enable=false"
     networks:
       - proxy
+    healthcheck:
+      test: ["CMD-SHELL", "wget -q --spider http://127.0.0.1:9000/ || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 15s
 networks:
   proxy:
     external: true

apps/adminer/docker-compose.yml

@@ -10,6 +10,12 @@ services:
       - mariadb
 #    ports:
 #      - 8080:8080
+    healthcheck:
+      test: ["CMD-SHELL", "curl -fSs http://127.0.0.1:8080/ >/dev/null || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 15s
 networks:
   proxy:
     name: nginx-proxy-net

apps/authentik-ak-outpost/docker-compose.yml

@@ -8,6 +8,16 @@ services:
 #      - 9000:9000
     env_file:
       - .env
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          "timeout 2 bash -c '</dev/tcp/127.0.0.1/9000' || exit 1",
+        ]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 20s
     networks:
       - proxy
 networks:

apps/autogenerate-hosts/docker-compose.yml

@@ -11,6 +11,12 @@ services:
       - "${HOSTSFILE_PATH}:/dest"
     networks:
       - autogenerate-hosts
+    healthcheck:
+      test: ["CMD-SHELL", "ps aux | grep -q '[g]enerate_hosts' || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 30s
 
 networks:
   autogenerate-hosts:

apps/backrest/docker-compose.yml

@@ -14,6 +14,12 @@ services:
     env_file:
       - .env
     restart: unless-stopped
+    healthcheck:
+      test: ["CMD-SHELL", "curl -fSs http://127.0.0.1:9898/ >/dev/null || exit 1"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
     networks:
       - proxy
 #    ports:

apps/caddy-home-assistant-liar/docker-compose.yml

@@ -12,6 +12,12 @@ services:
       - ../../lib/caddy-home-assistant-liar/config:/config
     env_file:
       - .env
+    healthcheck:
+      test: ["CMD-SHELL", "wget -q --spider http://127.0.0.1:2019/config/ || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 15s
     networks:
       - proxy
       - hass

apps/calibre-web/docker-compose.yml

@@ -11,6 +11,12 @@ services:
 #      - 8083:8083
     env_file:
       - .env
+    healthcheck:
+      test: ["CMD-SHELL", "curl -fSs http://127.0.0.1:8083/ >/dev/null || exit 1"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 45s
     networks:
       - proxy
 networks:

apps/cyberchef/docker-compose.yml

@@ -8,6 +8,12 @@ services:
       - proxy
 #    ports:
 #      - 8090:80
+    healthcheck:
+      test: ["CMD-SHELL", "curl -fSs http://127.0.0.1/ >/dev/null || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 15s
 networks:
   proxy:
     external: true

apps/db-backup/docker-compose.yml

@@ -13,6 +13,12 @@ services:
     networks:
       - postgresql
       - mariadb
+    healthcheck:
+      test: ["CMD-SHELL", "ps aux | grep -q '[b]ackup.rb' || exit 1"]
+      interval: 60s
+      timeout: 5s
+      retries: 3
+      start_period: 120s
 
 volumes:
   backup_nfs:

apps/dnsmasq/docker-compose.yml

@@ -13,3 +13,9 @@ services:
 #      - "53:53/udp"
     labels:
       - "com.centurylinklabs.watchtower.enable=false"
+    healthcheck:
+      test: ["CMD-SHELL", "pidof dnsmasq >/dev/null || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 10s