dev work

deploy/docker-compose.yml

@@ -7,21 +7,20 @@ services:
       - ./db:/db
     env_file:
       - .env
-    # healthcheck:
-    #   test:
-    #     [
-    #       "CMD",
-    #       "curl",
-    #       "-f",
-    #       "-s",
-    #       "--max-time",
-    #       "5",
-    #       "http://localhost:4321/health",
-    #     ]
-    #   interval: 30s
-    #   timeout: 15s
-    #   retries: 3
-    #   start_period: 120s
+    healthcheck:
+      test:
+        [
+          "node",
+          "-e",
+          "fetch('http://localhost:4321/health').then(r=>process.exit(r.ok?0:1))",
+        ]
+      interval: 30s
+      timeout: 15s
+      retries: 3
+      start_period: 120s
+    cap_drop: [ALL]
+    security_opt: [no-new-privileges:true]
+    read_only: true
   wireguard:
     image: qmcgaw/gluetun
     cap_add: