From 39287c2b874a2318288283f977a979978e65598d Mon Sep 17 00:00:00 2001
From: notplants <notplants@notplants>
Date: Fri, 20 Feb 2026 19:30:55 +0000
Subject: [PATCH 1/3] pin redis and nginx to full semver tags

---
 compose.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/compose.yml b/compose.yml
index 7052859..90055e0 100644
--- a/compose.yml
+++ b/compose.yml
@@ -200,7 +200,7 @@ services:
       - postgres_p
 
   redis:
-    image: redis:8
+    image: redis:8.0.5
     networks:
       - backend 
 
@@ -235,7 +235,7 @@ services:
       - minio_ru
 
   web:
-    image: nginx:1.29
+    image: nginx:1.29.5
     configs:
       - source: nginx_conf
         target: /etc/nginx/conf.d/default.conf
-- 
2.49.0


From c2f923d340b8425f1e51a44a6d91a097c9df0520 Mon Sep 17 00:00:00 2001
From: notplants <notplants@notplants>
Date: Fri, 20 Feb 2026 19:33:12 +0000
Subject: [PATCH 2/3] add healthchecks for celery, y-provider, redis, and web

---
 compose.yml | 29 ++++++++++++++++++++++++++---
 1 file changed, 26 insertions(+), 3 deletions(-)

diff --git a/compose.yml b/compose.yml
index 90055e0..29cf673 100644
--- a/compose.yml
+++ b/compose.yml
@@ -139,6 +139,12 @@ services:
     image: lasuite/impress-backend:v4.5.0
     networks:
       - backend
+    healthcheck:
+      test: ["CMD", "celery", "-A", "impress.celery_app", "inspect", "ping", "--timeout", "5"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
     user: "${DOCKER_USER:-1000}"
     command: ["celery", "-A", "impress.celery_app", "worker", "-l", "INFO"]
     environment:
@@ -162,13 +168,19 @@ services:
   y-provider:
     image: lasuite/impress-y-provider:v4.5.0
     networks:
-      - backend 
+      - backend
+    healthcheck:
+      # y-provider returns 403 on unauthenticated requests; wget exit 4 = network error (server down), anything else = server is responding
+      test: ["CMD-SHELL", "wget -qO /dev/null http://localhost:4444/ 2>/dev/null; test $$? -ne 4"]
+      interval: 15s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
     environment: *yprovider-env
     user: "${DOCKER_USER:-1000}"
     entrypoint: >
       sh -c "export Y_PROVIDER_API_KEY=\"$$(cat /run/secrets/y_api_key)\" && exec /usr/local/bin/entrypoint \"$$@\"" --
     command: ["yarn", "start"]
-    # NOTE: healthcheck - `wget` is available in the container, but `wget http://localhost:4444` gives a 403
     secrets:
       - y_api_key
 
@@ -201,8 +213,13 @@ services:
 
   redis:
     image: redis:8.0.5
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 15s
+      timeout: 5s
+      retries: 3
     networks:
-      - backend 
+      - backend
 
   minio:
     image: minio/minio:RELEASE.2025-05-24T17-08-30Z
@@ -236,6 +253,12 @@ services:
 
   web:
     image: nginx:1.29.5
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8083"]
+      interval: 15s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
     configs:
       - source: nginx_conf
         target: /etc/nginx/conf.d/default.conf
-- 
2.49.0


From 781f3350c2f430918701cabc41f2402b18a433dc Mon Sep 17 00:00:00 2001
From: notplants <notplants@notplants>
Date: Fri, 20 Feb 2026 19:51:18 +0000
Subject: [PATCH 3/3] bump to 0.2.9+v4.5.0

---
 compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/compose.yml b/compose.yml
index 29cf673..0887e23 100644
--- a/compose.yml
+++ b/compose.yml
@@ -91,7 +91,7 @@ services:
       labels:
         - "traefik.enable=false"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT:-120}"
-        - "coop-cloud.${STACK_NAME}.version=0.2.8+v4.5.0"
+        - "coop-cloud.${STACK_NAME}.version=0.2.9+v4.5.0"
     user: "${DOCKER_USER:-1000}"
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080"]
-- 
2.49.0