fix: final YAML syntax repair for docker-compose.yml (v1.15.14)

.gitea/workflows/deploy.yml

@@ -172,7 +172,7 @@ jobs:
             S3_BUCKET=${{ secrets.S3_BUCKET || vars.S3_BUCKET || 'mintel' }}
             S3_REGION=${{ secrets.S3_REGION || vars.S3_REGION || 'fsn1' }}
             S3_PREFIX=${{ secrets.S3_PREFIX || vars.S3_PREFIX || 'mintel.me' }}
-            DATABASE_URI=${{ secrets.DATABASE_URI || (needs.prepare.outputs.target == 'testing' && secrets.TESTING_DIRECTUS_DB_PASSWORD && format('postgres://directus:{0}@postgres-db:5432/directus', secrets.TESTING_DIRECTUS_DB_PASSWORD)) || 'postgres://payload:payload@postgres-db:5432/payload' }}
+            DATABASE_URI=${{ secrets.DATABASE_URI || (needs.prepare.outputs.target == 'testing' && secrets.TESTING_DIRECTUS_DB_PASSWORD && format('postgres://directus:{0}@postgres-db:5432/directus', secrets.TESTING_DIRECTUS_DB_PASSWORD)) || 'postgres://payload:payload@127.0.0.1:5432/payload' }}
             PAYLOAD_SECRET=${{ secrets.PAYLOAD_SECRET || 'secret' }}
             BUILD_ID=${{ github.sha }}
           tags: registry.infra.mintel.me/mintel/mintel.me:${{ needs.prepare.outputs.image_tag }}

docker-compose.yml

@@ -2,6 +2,7 @@ services:
   mintel-me-app:
     image: registry.infra.mintel.me/mintel/mintel.me:${IMAGE_TAG:-latest}
     restart: always
+    command: node apps/web/server.js
     networks:
       - default
       - infra
@@ -9,16 +10,9 @@ services:
       - ${ENV_FILE:-.env}
     labels:
       - "traefik.enable=true"
-    healthcheck:
-      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:3000/ || exit 1"]
-      interval: 10s
-      timeout: 5s
-      retries: 5
-      start_period: 20s
       # HTTP ⇒ HTTPS redirect
       - 'traefik.http.routers.${PROJECT_NAME}-web.rule=${TRAEFIK_HOST_RULE:-Host("${TRAEFIK_HOST:-mintel.localhost}")}'
       - "traefik.http.routers.${PROJECT_NAME}-web.entrypoints=web"
-      # - "traefik.http.routers.${PROJECT_NAME}-web.middlewares=redirect-https"
       # HTTPS router (Standard)
       - 'traefik.http.routers.${PROJECT_NAME}.rule=${TRAEFIK_HOST_RULE:-Host("${TRAEFIK_HOST:-mintel.localhost}")}'
       - "traefik.http.routers.${PROJECT_NAME}.entrypoints=${TRAEFIK_ENTRYPOINT:-web}"
@@ -42,6 +36,7 @@ services:
 
       # Middlewares
       - "traefik.http.middlewares.${PROJECT_NAME}-ratelimit.ratelimit.average=100"
+      - "traefik.http.middlewares.${PROJECT_NAME}-ratelimit.ratelimit.burst=200"
       - "traefik.http.middlewares.${PROJECT_NAME}-ratelimit.ratelimit.burst=50"
 
       # Gatekeeper Router (Path-based)
@@ -59,6 +54,12 @@ services:
       # Forwarded Headers
       - "traefik.http.middlewares.${PROJECT_NAME}-forward.headers.customrequestheaders.X-Forwarded-Proto=https"
       - "traefik.http.middlewares.${PROJECT_NAME}-forward.headers.customrequestheaders.X-Forwarded-Ssl=on"
+    healthcheck:
+      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:3000/ || exit 1"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 20s
 
   gatekeeper:
     profiles: ["gatekeeper"]