Ebbe BaßandClaude Sonnet 5.5
f8b0584687
Environment-variable configuration that fails fast, database-only health check, JSON request logs with a request id, security headers with a strict CSP, and a multi-stage non-root Docker image with compose file. Ticket 1.1. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Sk72AxLwQnYttF6VFSxQLt
17 lines
582 B
Python
17 lines
582 B
Python
"""Container health probe: GET /healthz with a host name the app accepts."""
|
|
|
|
import os
|
|
import sys
|
|
import urllib.request
|
|
|
|
hosts = [h.strip() for h in os.environ.get("ALLOWED_HOSTS", "").split(",") if h.strip()]
|
|
host = hosts[0].lstrip(".") if hosts and hosts[0] != "*" else "localhost"
|
|
request = urllib.request.Request( # noqa: S310
|
|
"http://127.0.0.1:8000/healthz", headers={"Host": host}
|
|
)
|
|
try:
|
|
with urllib.request.urlopen(request, timeout=3) as response: # noqa: S310
|
|
sys.exit(0 if response.status == 200 else 1)
|
|
except Exception: # noqa: BLE001
|
|
sys.exit(1)
|