fix(compose): depends_on service_started — le step healthcheck CI gere l'attente

.woodpecker.yml

@@ -51,15 +51,15 @@ steps:
       - cd /opt/dtrack && docker compose config
       - echo "=== pull ==="
       - cd /opt/dtrack && docker compose pull --no-parallel
-      - echo "=== up ==="
-      - cd /opt/dtrack && docker compose up -d --remove-orphans
-      - cd /opt/dtrack && docker compose ps
+      - echo "=== stop (deregistre Registrator avant challenge ACME) ==="
+      - cd /opt/dtrack && docker compose stop
       - |
-        PROJECT=$(grep '^COMPOSE_PROJECT_NAME=' /opt/dtrack/.env | cut -d= -f2)
         DOMAIN=$(grep '^DTRACK_DOMAIN=' /opt/dtrack/.env | cut -d= -f2)
 
-        # --- Certificat TLS (acme.sh via sonic-acme-1) ---
-        # Exit 0 = emis/renouvele, exit 2 = skip (domaine inchange), autres = erreur
+        # --- Certificat TLS ---
+        # Apres docker compose stop : Registrator a deregistre les conteneurs de Fabio.
+        # La route globale */.well-known/acme-challenge/* peut repondre sans interference.
+        # Exit 0 = emis/renouvele, exit 2 = skip (cert valide), autres = erreur
         ACME_EXIT=0
         docker exec sonic-acme-1 /app/acme.sh \
           --home /etc/acme.sh \
@@ -74,7 +74,9 @@ steps:
         docker exec sonic-acme-1 cp /etc/acme.sh/$DOMAIN/fullchain.cer /host/certs/$DOMAIN-cert.pem
         docker exec sonic-acme-1 cp /etc/acme.sh/$DOMAIN/$DOMAIN.key /host/certs/$DOMAIN-key.pem
         echo "Cert TLS: /host/certs/$DOMAIN-cert.pem OK (acme exit $ACME_EXIT)"
-
+      - echo "=== up ==="
+      - cd /opt/dtrack && docker compose up -d --remove-orphans
+      - cd /opt/dtrack && docker compose ps
       # Fabio routing gere automatiquement par Registrator via les labels SERVICE_* du compose
 
   # TEST deploy : verifie que les conteneurs sont running

docker-compose.yml

@@ -9,10 +9,8 @@ services:
     restart: always
     environment:
       # Stockage H2 interne — suffisant pour une team, pas de PostgreSQL requis
-      # Les deux formes sont supportees selon la version (< 4.12 vs >= 4.12)
       ALPINE_DATABASE_MODE: internal
       ALPINE_DATA_DIRECTORY: /data
-      EXTRA_JAVA_OPTIONS: "-Xmx4g"
     volumes:
       - dtrack_data:/data
     healthcheck:
@@ -42,7 +40,7 @@ services:
       API_BASE_URL: https://${DTRACK_DOMAIN}
     depends_on:
       apiserver:
-        condition: service_healthy
+        condition: service_started
     networks:
       - dtrack-net
       - sonic