docker-compose-stack-health-overrides.yml

version: "3.8"
services:
  # WARNING: This service mounts the docker socket. This is required to test if all containers on the host are healthy.
  # Although the web service should be secure, additional mitigations should be put in place:
  #   - Restrict remote access to port 5100 to trusted sources
  #   - Restrict STACK_HEALTH_HOST to trusted hosts
  stack_health:
    image: "335594571162.dkr.ecr.ap-southeast-2.amazonaws.com/stack-health:latest"
    restart: always
    ports: [ "5100:5100" ]
    environment:
      STACK_HEALTH_HOST: "0.0.0.0"
    userns_mode: host
    # set this to an appropriate user/group to give it access to the docker socket.
    # you can get the uid:gid of the socket using `stat -c '%u:%g' /var/run/docker.sock`
    user: 999:999
    volumes:
      - type: bind
        source: ${DOCKER_HOST:-/var/run/docker.sock}
        target: /var/run/docker.sock
    depends_on:
      web:
        condition: service_healthy
      celery_worker:
        condition: service_healthy
      inference:
        condition: service_healthy