fix(deployment): run Caddy non-root under all users, add process supervision, fix healthcheck

- docker-entrypoint.sh: always start both Caddy and Python instead of exiting
  early for non-root containers; drop Caddy's privileges via gosu (never runs
  as root); supervise both processes with `wait -n` and tear down the
  container if either one dies
- Caddyfile: add `admin off`; enforce MAX_UPLOAD_SIZE via `request_body
  max_size` on /api/* instead of relying on an unused env var
- docker-compose.yml: use explicit MAX_UPLOAD_SIZE=30MB unit
- Dockerfile: merge COPY+chown into a single `COPY --chown` layer for
  src/; fix HEALTHCHECK Python one-liner (literal \n was causing a
  SyntaxError on every check, so the container never reported healthy)
This commit is contained in:
dido committed 2026-09-22 14:59:24 +03:00
1 parent 9a70ae1578
commit 27f2314c96
5 files changed
+89 -42

No files matched your search

+3 -2
View File
@@ -111,8 +111,9 @@ body {
.connection-heading {
display: flex;
align-items: baseline;
gap: 8px;
flex-direction: column; /* Добавено: подрежда ги вертикално */
align-items: flex-start; /* Променено: подравнява ги вляво */
gap: 2px; /* Намалено, за да са по-близо едно до друго вертикално */
min-width: 0;
margin-bottom: 4px;
}