add production readiness and recovery assets

docker-compose.yml

@@ -10,6 +10,7 @@ services:
       API_PORT: 8000
       LOG_LEVEL: ${LOG_LEVEL:-INFO}
       CORS_ORIGINS: ${CORS_ORIGINS:-http://localhost:8080}
+      SESSION_SECRET: ${SESSION_SECRET:-}
       DATA_DIR: /data
       # Optional first-run admin bootstrap; leave unset after provisioning.
       BOOTSTRAP_ADMIN_EMAIL: ${BOOTSTRAP_ADMIN_EMAIL:-}
@@ -20,6 +21,8 @@ services:
     volumes:
       - prospect_api_data:/data
     read_only: true
+    init: true
+    pids_limit: 128
     tmpfs:
       - /tmp
     security_opt:
@@ -27,7 +30,7 @@ services:
     cap_drop:
       - ALL
     healthcheck:
-      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/api/v1/health/live', timeout=2)"]
+      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/api/v1/health/ready', timeout=2)"]
       interval: 10s
       timeout: 3s
       retries: 5
@@ -44,6 +47,8 @@ services:
     ports:
       - "${WEB_PORT:-8080}:8080"
     read_only: true
+    init: true
+    pids_limit: 128
     tmpfs:
       - /tmp
     security_opt: