fix(compose): depends_on service_started — le step healthcheck CI gere l'attente

.woodpecker.yml

@@ -51,9 +51,33 @@ steps:
       - cd /opt/dtrack && docker compose config
       - echo "=== pull ==="
       - cd /opt/dtrack && docker compose pull --no-parallel
+      - echo "=== stop (deregistre Registrator avant challenge ACME) ==="
+      - cd /opt/dtrack && docker compose stop
+      - |
+        DOMAIN=$(grep '^DTRACK_DOMAIN=' /opt/dtrack/.env | cut -d= -f2)
+
+        # --- Certificat TLS ---
+        # Apres docker compose stop : Registrator a deregistre les conteneurs de Fabio.
+        # La route globale */.well-known/acme-challenge/* peut repondre sans interference.
+        # Exit 0 = emis/renouvele, exit 2 = skip (cert valide), autres = erreur
+        ACME_EXIT=0
+        docker exec sonic-acme-1 /app/acme.sh \
+          --home /etc/acme.sh \
+          --issue -d "$DOMAIN" \
+          --webroot /usr/share/nginx/html \
+          --server letsencrypt \
+          --accountemail support+acme@asycn.io || ACME_EXIT=$?
+        if [ "$ACME_EXIT" -ne 0 ] && [ "$ACME_EXIT" -ne 2 ]; then
+          echo "ERREUR: acme.sh a echoue (exit $ACME_EXIT)"
+          exit 1
+        fi
+        docker exec sonic-acme-1 cp /etc/acme.sh/$DOMAIN/fullchain.cer /host/certs/$DOMAIN-cert.pem
+        docker exec sonic-acme-1 cp /etc/acme.sh/$DOMAIN/$DOMAIN.key /host/certs/$DOMAIN-key.pem
+        echo "Cert TLS: /host/certs/$DOMAIN-cert.pem OK (acme exit $ACME_EXIT)"
       - echo "=== up ==="
       - cd /opt/dtrack && docker compose up -d --remove-orphans
       - cd /opt/dtrack && docker compose ps
+      # Fabio routing gere automatiquement par Registrator via les labels SERVICE_* du compose
 
   # TEST deploy : verifie que les conteneurs sont running
   # NOTE: pas de ${VAR} (substitue par Woodpecker) — utiliser $VAR sans accolades

docker-compose.yml

@@ -9,10 +9,8 @@ services:
     restart: always
     environment:
       # Stockage H2 interne — suffisant pour une team, pas de PostgreSQL requis
-      # Les deux formes sont supportees selon la version (< 4.12 vs >= 4.12)
       ALPINE_DATABASE_MODE: internal
       ALPINE_DATA_DIRECTORY: /data
-      EXTRA_JAVA_OPTIONS: "-Xmx4g"
     volumes:
       - dtrack_data:/data
     healthcheck:
@@ -42,7 +40,7 @@ services:
       API_BASE_URL: https://${DTRACK_DOMAIN}
     depends_on:
       apiserver:
-        condition: service_healthy
+        condition: service_started
     networks:
       - dtrack-net
       - sonic