Merge branch 'setup'

Services/Website/docker-compose.yml

@@ -6,9 +6,8 @@ name: site-platform
 #   docker compose -f docker-compose.yml pull
 #   docker compose -f docker-compose.yml up -d
 #
-# The `-f docker-compose.yml` flag is important in production: it skips the
-# docker-compose.override.yml file, which Compose would otherwise merge in
-# automatically for local development.
+# The `-f docker-compose.yml` flag is important in production: it skips the docker-compose.override.yml file, which
+# Compose would otherwise merge in automatically for local development.
 services:
   website:
     image: ${HOST_CONTAINER}/${HOST_OWNER}/${IMAGE_NAME}:${IMAGE_TAG:-latest}
@@ -21,13 +20,18 @@ services:
       LOG_LEVEL: ${LOG_LEVEL:-info}
       HTTP_SERVER_NAME: ${HTTP_SERVER_NAME:-SiteWebsite}
       SECURITY_STRICT_TRANSPORT_SECURITY: "${SECURITY_STRICT_TRANSPORT_SECURITY:-max-age=31536000; includeSubDomains}"
-      # Persistence: in-memory by default; set DATABASE_DRIVER=mysql to run against a
-      # managed MySQL/MariaDB database. Provide the password via the environment or a
-      # secret — never commit it.
+      # Persistence: in-memory by default; set DATABASE_DRIVER=mysql to run against a managed MySQL/MariaDB database.
+      # Provide the password via the environment or a secret — never commit it.
       DATABASE_DRIVER: ${DATABASE_DRIVER:-mysql}
       DATABASE_HOST: ${DATABASE_HOST:-localhost}
       DATABASE_PORT: ${DATABASE_PORT:-3306}
       DATABASE_NAME: ${DATABASE_NAME:-site}
       DATABASE_USERNAME: ${DATABASE_USERNAME:-site}
       DATABASE_PASSWORD: ${DATABASE_PASSWORD:-}
-      DATABASE_TLS: ${DATABASE_TLS:-require}
+      DATABASE_TLS: ${DATABASE_TLS:-prefer}
+    healthcheck:
+      test: ["CMD", "curl", "--fail", "--silent", "--show-error", "http://127.0.0.1:8080/health"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 10s