From a5971403b2106d5db42c91d35859ed2b422b5b26 Mon Sep 17 00:00:00 2001
From: domverse <domverse@domverse-berlin.eu>
Date: Tue, 16 Jun 2026 23:51:49 +0200
Subject: [PATCH] fix: drop docker healthcheck so Traefik routes immediately
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Traefik docker provider skips routing for containers whose Docker HEALTHCHECK
reports unhealthy. Our /healthz returns 503 if LAPI is unreachable, which left
the container stuck unhealthy and the router never appeared — every request
returned 404 from Traefik.

/healthz still exists for manual probes; Kuma probes via Traefik also still
work.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 docker-compose.yml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 896ed11..aeab00f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -15,11 +15,6 @@ services:
       - LAPI_MACHINE_ID=${LAPI_MACHINE_ID}
       - LAPI_MACHINE_PASSWORD=${LAPI_MACHINE_PASSWORD}
       - TRUSTED_PROXY_HOPS=1
-    healthcheck:
-      test: ["CMD", "python", "-c", "import urllib.request,sys; sys.exit(0 if urllib.request.urlopen('http://127.0.0.1:8000/healthz', timeout=3).status==200 else 1)"]
-      interval: 60s
-      timeout: 5s
-      retries: 3
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.crowdsec-admin.rule=Host(`crowdsec.domverse-berlin.eu`)"