From eedb08316d85535a152603d42e68ed9f86e8f4b0 Mon Sep 17 00:00:00 2001
From: Micha <michideheld@gmx.de>
Date: Fri, 29 May 2026 15:09:50 +0200
Subject: [PATCH] Add healthcheck to Redis (redis-cli ping with auth)

Tier-1 health visibility for the shared Redis. Uses redis-cli with
the password from the mounted secret, fails on anything but PONG.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 infra/redis/docker-compose.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/infra/redis/docker-compose.yml b/infra/redis/docker-compose.yml
index 9801fd7..01903e8 100644
--- a/infra/redis/docker-compose.yml
+++ b/infra/redis/docker-compose.yml
@@ -18,6 +18,13 @@ services:
     security_opt:
       - no-new-privileges:true
 
+    healthcheck:
+      test: ["CMD-SHELL", "redis-cli -a \"$$(cat /run/secrets/redis_password)\" --no-auth-warning ping | grep -q PONG"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 15s
+
 networks:
   backend_net:
     external: true