adjust healthcheck and timeouts

.env.sample

@@ -14,7 +14,6 @@ SECRET_SSO_CERT_VERSION=v1
 # SSO_PROVIDER_URL=https://sso.example.org/
 # SSO_SAML_URL=https://sso.example.org/application/saml/<application-slug>/sso/binding/redirect/
 # SSO_LOGOUT_URL=https://sso.example.org/if/session-end/<application-slug>/
-# SSO_CERT="muchmuchbase64certificatefoobar=="
 
 # MAILER_URL="smtp://<from>:<password>%3F@<mailserver>:587"
 # MAILER_FROM="Kimai Notifications noreply@example.com"

README.md

@@ -8,11 +8,11 @@ CoöpCloud [Kimai] ✊⏰
 * **Category**: Apps
 * **Status**: ?
 * **Image**: [`kimai/kimai2`](https://hub.docker.com/kimai/kimai2), 4, upstream
-* **Healthcheck**: No
-* **Backups**: No
-* **Email**: No
+* **Healthcheck**: Yes
+* **Backups**: Yes
+* **Email**: Yes
 * **Tests**: 2
-* **SSO**: No
+* **SSO**: Yes
 <!-- endmetadata -->
 
 Based on the recommended [`tobybatch/kimai2`] compose file.
@@ -29,3 +29,8 @@ Based on the recommended [`tobybatch/kimai2`] compose file.
 [`tobybatch/kimai2`]: https://tobybatch.github.io/kimai2/docker-compose.html#docker-compose
 [`abra`]: https://git.autonomic.zone/autonomic-cooperative/abra
 [`coop-cloud/traefik`]: https://git.autonomic.zone/coop-cloud/traefik
+
+## SSO
+
+To enable SSO, after running the blueprint in Authentik and before deploying Kimai, you need to add the Authentik Self-Signed-Certificate as secret in Kimai via the following command:
+`abra app cmd -l kimai.tmp.dev.local-it.cloud insert_authentik_certificate`

compose.yml

@@ -41,10 +41,10 @@ services:
     entrypoint: /docker-entrypoint.sh
     healthcheck:
      test: curl -s -o /dev/null http://localhost:8001 || exit 1
-     interval: 20s
-     start_period: 120s
+     interval: 30s
+     start_period: 3m
      timeout: 10s
-     retries: 3
+     retries: 10
     deploy:
       restart_policy:
         condition: on-failure
@@ -59,6 +59,7 @@ services:
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
         - "coop-cloud.${STACK_NAME}.version=1.0.0+apache-2.15.0-prod"
+        - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
   db:
     image: mysql:5.7
     environment: