Switch health check endpoint to Unix socket to avoid port conflicts

Author: dash14

compose.yml

@@ -15,7 +15,7 @@ services:
       - EXTERNAL_RESOLVER=${EXTERNAL_RESOLVER:-8.8.8.8 8.8.4.4 valid=300s}
     restart: unless-stopped
     healthcheck:
-      test: ["CMD", "sh", "-c", "wget -qO /dev/null http://127.0.0.1/health && nc -z 127.0.0.1 1234"]
+      test: ["CMD", "sh", "-c", "curl -sf --unix-socket /var/run/nginx-health.sock http://localhost/health && nc -z 127.0.0.1 1234"]
       interval: 30s
       timeout: 5s
       retries: 10

docker/Dockerfile

@@ -17,7 +17,8 @@ FROM moby/buildkit:${BUILDKIT_VERSION}
 RUN apk add --no-cache \
       nginx nginx-mod-stream \
       dnsmasq \
-      iptables
+      iptables \
+      curl
 
 # envsubst
 COPY --from=deps /usr/bin/envsubst /usr/bin/envsubst

docker/files/nginx.conf.template

@@ -109,12 +109,10 @@ ${NGINX_HTTP_LISTEN_DEFAULT}
         }
     }
 
-    # Localhost-only server (for health checks)
+    # Health check (fixed port, localhost only)
     server {
-${NGINX_HTTP_LISTEN}
-        server_name localhost 127.0.0.1;
+        listen unix:/var/run/nginx-health.sock;
 
-        # Health check
         location /health {
             access_log off;
             return 200 "OK\n";

setup/compose.yml

@@ -13,7 +13,7 @@ services:
       - EXTERNAL_RESOLVER=${EXTERNAL_RESOLVER:-1.1.1.1 8.8.8.8 valid=300s}
     restart: unless-stopped
     healthcheck:
-      test: ["CMD", "sh", "-c", "wget -qO /dev/null http://127.0.0.1/health && nc -z 127.0.0.1 1234"]
+      test: ["CMD", "sh", "-c", "curl -sf --unix-socket /var/run/nginx-health.sock http://localhost/health && nc -z 127.0.0.1 1234"]
       interval: 30s
       timeout: 5s
       retries: 10