feat: enforced CI deployment healthcheck waiting (zero-downtime)

.gitea/workflows/deploy.yml

@@ -388,7 +388,7 @@ jobs:
             docker volume create 'mintel-me_payload-db-data' || true
             cd $SITE_DIR
             docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file $ENV_FILE pull
-            docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file $ENV_FILE up -d --remove-orphans
+            docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file $ENV_FILE up -d --wait --remove-orphans
           "
 
       - name: 🧹 Purge S3 Cache

Dockerfile

@@ -31,6 +31,9 @@ ENV DATABASE_URI=$DATABASE_URI
 ENV PAYLOAD_SECRET=$PAYLOAD_SECRET
 ENV SKIP_RUNTIME_ENV_VALIDATION=true
 ENV NEXT_BUILD_WORKERS=1
+ENV NEXT_DISABLE_SOURCEMAPS=true
+ENV SENTRY_SKIP_LOCAL_SOURCES=true
+ENV NEXT_PRIVATE_LOCAL_WEBPACK=true
 ENV CI=true
 
 # Copy manifest files specifically for better layer caching
@@ -60,8 +63,8 @@ RUN echo "Building with ID: ${BUILD_ID}"
 COPY . .
 
 # Build application (monorepo filter)
-ENV NODE_OPTIONS="--max_old_space_size=8192"
-RUN pnpm --filter @mintel/web build
+ENV NODE_OPTIONS="--max_old_space_size=4096"
+RUN NEXT_BUILD_WORKERS=1 pnpm --filter @mintel/web build
 
 # Stage 2: Runner
 FROM git.infra.mintel.me/mmintel/runtime:latest AS runner
@@ -85,4 +88,4 @@ USER nextjs
 # Start from the app directory to ensure references solve correctly
 # In Standalone mode, Next.js expects node_modules and public relative to the server.js
 WORKDIR /app
-CMD ["node", "server.js"]
+CMD ["node", "apps/web/server.js"]

docker-compose.yml

@@ -9,6 +9,12 @@ services:
       - ${ENV_FILE:-.env}
     labels:
       - "traefik.enable=true"
+    healthcheck:
+      test: ["CMD-SHELL", "wget --no-verbose --tries=1 --spider http://127.0.0.1:3000/ || exit 1"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 20s
       # HTTP ⇒ HTTPS redirect
       - 'traefik.http.routers.${PROJECT_NAME}-web.rule=${TRAEFIK_HOST_RULE:-Host("${TRAEFIK_HOST:-mintel.localhost}")}'
       - "traefik.http.routers.${PROJECT_NAME}-web.entrypoints=web"