From 609422b5b92a4fc7a01d3ebcf63c453eed296fe7 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Mon, 9 Feb 2026 12:02:33 +0100
Subject: [PATCH] fix: zero downtime deploy

---
 .gitea/workflows/deploy.yml | 2 +-
 docker-compose.yaml         | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index dec19f2..6556a3e 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -288,7 +288,7 @@ jobs:
             
             echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin
             docker compose -p "${{ needs.prepare.outputs.project_name }}" --env-file ${{ needs.prepare.outputs.env_file }} pull
-            docker compose -p "${{ needs.prepare.outputs.project_name }}" --env-file ${{ needs.prepare.outputs.env_file }} up -d --remove-orphans
+            docker compose -p "${{ needs.prepare.outputs.project_name }}" --env-file ${{ needs.prepare.outputs.env_file }} up -d --wait --remove-orphans
             docker system prune -f --filter "until=24h"
           EOF
 
diff --git a/docker-compose.yaml b/docker-compose.yaml
index 640a60a..fd99853 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -27,6 +27,12 @@ services:
       - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.trustForwardHeader=true"
       - "traefik.http.middlewares.${PROJECT_NAME}-auth.forwardauth.authResponseHeaders=X-Auth-User"
       - "traefik.docker.network=infra"
+    healthcheck:
+      test: [ "CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3000/api/health" ]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
 
   gatekeeper:
     image: registry.infra.mintel.me/mintel/gatekeeper:latest