Add healthcheck to Authelia (authelia helper health-check)

Authelia ships its own health-check binary subcommand since 4.37+.
Avoids needing wget/curl in the container.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

core/gitea/docker-compose.yml

@@ -26,6 +26,12 @@ services:
       - "222:22"
     networks:
       - frontend_net
+    healthcheck:
+      test: ["CMD-SHELL", "wget -q --spider http://localhost:3000/api/healthz || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 60s
     labels:
       - "traefik.enable=true"
       - "traefik.docker.network=frontend_net"

infra/postgresql17/docker-compose.yml

@@ -21,6 +21,13 @@ services:
     security_opt:
       - no-new-privileges:true
 
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U mailarchiver -d mailarchiver"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
+
 networks:
   backend_net:
     external: true

infra/redis/docker-compose.yml

@@ -18,6 +18,13 @@ services:
     security_opt:
       - no-new-privileges:true
 
+    healthcheck:
+      test: ["CMD-SHELL", "redis-cli -a \"$$(cat /run/secrets/redis_password)\" --no-auth-warning ping | grep -q PONG"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 15s
+
 networks:
   backend_net:
     external: true

security/authelia/docker-compose.yml

@@ -26,6 +26,12 @@ services:
       - backend_net
     security_opt:
       - no-new-privileges:true
+    healthcheck:
+      test: ["CMD", "authelia", "helper", "health-check"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
     labels:
       - "traefik.enable=true"
       - "traefik.docker.network=frontend_net"

security/vaultwarden/docker-compose.yml

@@ -24,6 +24,13 @@ services:
     security_opt:
       - no-new-privileges:true
 
+    healthcheck:
+      test: ["CMD-SHELL", "wget -q --spider http://localhost:80/alive || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
+
     labels:
       - traefik.enable=true
       - traefik.docker.network=frontend_net

traefik/docker-compose.yml

@@ -8,6 +8,7 @@ services:
     command:
       - --api.dashboard=true
       - --api.insecure=false
+      - --ping=true
       - --providers.docker=true
       - --providers.docker.exposedbydefault=false
       - --providers.docker.network=frontend_net
@@ -46,6 +47,12 @@ services:
       - frontend_net
       - backend_net
       - monitoring_net
+    healthcheck:
+      test: ["CMD", "traefik", "healthcheck", "--ping"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 30s
     labels:
       - traefik.enable=true
       - traefik.docker.network=frontend_net