fix: port api-watchdog mitigation into the real installer compose

The 2026-09-12 CT 101 502 incident fix (api-watchdog: detects the API
container hanging while docker still reports it healthy, and restarts it)
only ever landed in argus-appliance's docker/docker-compose.yml, the
source-build dev compose. It never reached this repo, which is what
update.sh/install.sh on every real Docker-based install actually use --
so the mitigation never shipped to a real install. Ported the service
(built locally from a bundled Dockerfile, since there is no released,
cosign-verified argus-api-watchdog image yet) plus its build context.

This commit is contained in:

root

2026-09-12 13:21:45 +00:00

parent b124e02886

commit 72db2b9718

4 changed files with 167 additions and 0 deletions

									
										watchdog/Dockerfile
									
		+9
		
												View File
												
				@@ -0,0 +1,9 @@

				FROM alpine:3.20

				RUN apk add --no-cache curl jq

				COPY entrypoint.sh /entrypoint.sh

				RUN chmod +x /entrypoint.sh

				USER nobody

				ENTRYPOINT ["/entrypoint.sh"]