security: hardening по результатам аудита безопасности

2026-08-08 22:48:16 +03:00
parent 8c8631ac9c
commit bf2bceb520
18 changed files with 400 additions and 20 deletions
@@ -11,7 +11,7 @@ RUN addgroup -S app && adduser -S -G app app
 COPY --from=builder --chown=app:app /out/synapse-backupper /usr/local/bin/synapse-backupper
 USER app
 EXPOSE 8080
-HEALTHCHECK --interval=30s --timeout=3s --start-period=10s CMD wget -qO- http://localhost:8080/healthz || exit 1
+HEALTHCHECK --interval=30s --timeout=3s --start-period=10s CMD ["synapse-backupper", "healthcheck"]
 LABEL maintainer="infra@tswf.io" version="0.1.0" description="Synapse PostgreSQL backup tool with composite dual-KEM encryption"
 ENTRYPOINT ["/usr/local/bin/synapse-backupper"]
 CMD ["run"]