Add Docker health checks for reliable startup ordering

Nginx proxy can fail when backend isn't ready yet because `links` only
ensures DNS resolution, not service readiness. Add healthchecks to
postgres (pg_isready), elasticsearch (cluster health), and backend
(/api/health), then use `depends_on: condition: service_healthy` to
enforce postgres+elasticsearch → backend → proxy startup order.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: vharmain

docker-compose.yml

@@ -21,6 +21,9 @@ services:
   proxy:
     extends:
       service: proxy-base
+    depends_on:
+      backend:
+        condition: service_healthy
     links:
       - mapproxy
       - backend
@@ -35,9 +38,12 @@ services:
   proxy-dev:
     extends:
       service: proxy-base
+    depends_on:
+      backend:
+        condition: service_healthy
     links:
       - mapproxy
-      #- backend
+      - backend
       - logstash
       - kibana
       - geoserver
@@ -163,6 +169,17 @@ services:
     extends:
       service: backend-base
     command: java -Duser.timezone=UTC -Xmx2G -jar backend.jar -m lipas.backend.system server
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8091/api/health"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 60s
+    depends_on:
+      postgres:
+        condition: service_healthy
+      elasticsearch:
+        condition: service_healthy
     ports:
       - '8091:8091'
       - '7888:7888'
@@ -304,6 +321,11 @@ services:
 
   postgres:
     image: postgis/postgis:17-3.5
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U $$POSTGRES_USER"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
     environment:
       POSTGRES_USER: ${DB_SUPERUSER}
       POSTGRES_PASSWORD: ${DB_SUPERUSER_PASSWORD}
@@ -320,6 +342,12 @@ services:
 
   elasticsearch:
     image: docker.elastic.co/elasticsearch/elasticsearch:8.19.9
+    healthcheck:
+      test: ["CMD-SHELL", "curl -sf http://localhost:9200/_cluster/health || exit 1"]
+      interval: 30s
+      timeout: 10s
+      retries: 5
+      start_period: 30s
     ports:
       - '9200:9200'
       - '9300:9300'
@@ -341,7 +369,8 @@ services:
   elasticsearch-setup:
     image: curlimages/curl:8.11.1
     depends_on:
-      - elasticsearch
+      elasticsearch:
+        condition: service_healthy
     volumes:
       - "./elasticsearch/setup:/setup:z"
     environment: