From 75e7217f4de25771b8c2850b66f7f451e91fafd8 Mon Sep 17 00:00:00 2001 From: Frank Date: Sun, 30 Aug 2026 17:35:47 -0700 Subject: [PATCH] authentik: fix mangled pg_isready health probe The quadlet generator space-splits HealthCmd into the healthcheck argv, so the quoted /bin/sh -c form arrived mangled and failed with exit 1 forever (FailingStreak 569) while the DB itself accepted connections. Bare argv survives both exec forms. --- dankclaw/authentik/quadlet/authentik-postgres.container | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/dankclaw/authentik/quadlet/authentik-postgres.container b/dankclaw/authentik/quadlet/authentik-postgres.container index 800f86b..cc5389e 100644 --- a/dankclaw/authentik/quadlet/authentik-postgres.container +++ b/dankclaw/authentik/quadlet/authentik-postgres.container @@ -21,7 +21,12 @@ Environment=POSTGRES_DB=authentik Environment=POSTGRES_USER=authentik Environment=POSTGRES_PASSWORD=${AUTHENTIK_PG_PASS} Volume=/home/dank/authentik/postgres:/var/lib/postgresql/data -HealthCmd=/bin/sh -c "pg_isready -d authentik -U authentik" +# Unquoted argv: this quadlet generator space-splits HealthCmd into the +# healthcheck's argv array, so a quoted probe would arrive mangled (the old +# `/bin/sh -c "pg_isready..."` form arrived as /bin/sh + broken args and +# failed with exit 1 forever — the health status was a false negative while +# the DB itself accepted connections). Bare argv works under both exec forms. +HealthCmd=pg_isready -d authentik -U authentik HealthInterval=30s HealthTimeout=10s HealthRetries=5