Stabilize U

devops/compose/docker-compose.stella-ops.yml

@@ -263,8 +263,12 @@ services:
       <<: *kestrel-cert
       ConnectionStrings__Default: *postgres-connection
       ConnectionStrings__Redis: "cache.stella-ops.local:6379"
-      Platform__Authority__Issuer: "http://stella-ops.local"
+      Platform__Authority__Issuer: "https://stella-ops.local"
       Platform__Authority__RequireHttpsMetadata: "false"
+      Platform__Storage__Driver: "postgres"
+      Platform__Storage__PostgresConnectionString: *postgres-connection
+      Platform__EnvironmentSettings__RedirectUri: "https://stella-ops.local/auth/callback"
+      Platform__EnvironmentSettings__PostLogoutRedirectUri: "https://stella-ops.local/"
       STELLAOPS_ROUTER_URL: "http://router.stella-ops.local"
       STELLAOPS_PLATFORM_URL: "http://platform.stella-ops.local"
       STELLAOPS_AUTHORITY_URL: "http://authority.stella-ops.local"
@@ -348,8 +352,11 @@ services:
       STELLAOPS_AUTHORITY_AUTHORITY__NOTIFICATIONS__WEBHOOKS__ALLOWEDHOSTS__0: "notify.stella-ops.local"
       STELLAOPS_AUTHORITY_AUTHORITY__NOTIFICATIONS__ESCALATION__SCOPE: "notify.escalate"
       STELLAOPS_AUTHORITY_AUTHORITY__BOOTSTRAP__ENABLED: "false"
-      STELLAOPS_AUTHORITY_AUTHORITY__PLUGINDIRECTORIES__0: "/app/plugins"
+      STELLAOPS_AUTHORITY_AUTHORITY__PLUGINDIRECTORIES__0: "/app"
       STELLAOPS_AUTHORITY_AUTHORITY__PLUGINS__CONFIGURATIONDIRECTORY: "/app/etc/authority/plugins"
+      STELLAOPS_AUTHORITY_AUTHORITY__PLUGINS__DESCRIPTORS__standard__Type: "standard"
+      STELLAOPS_AUTHORITY_AUTHORITY__PLUGINS__DESCRIPTORS__standard__AssemblyName: "StellaOps.Authority.Plugin.Standard"
+      STELLAOPS_AUTHORITY_AUTHORITY__PLUGINS__DESCRIPTORS__standard__Enabled: "true"
     volumes:
       - ../../etc/authority:/app/etc/authority:ro
       - ../../etc/certificates/trust-roots:/etc/ssl/certs/stellaops:ro

devops/docker/healthcheck.sh

@@ -8,10 +8,19 @@ USER_AGENT="stellaops-healthcheck"
 
 fetch() {
   target_path="$1"
-  # BusyBox wget is available in Alpine; curl not assumed.
-  wget -qO- "http://${HOST}:${PORT}${target_path}" \
-    --header="User-Agent: ${USER_AGENT}" \
-    --timeout="${HEALTH_TIMEOUT:-4}" >/dev/null
+  url="http://${HOST}:${PORT}${target_path}"
+  if command -v curl >/dev/null 2>&1; then
+    curl -sf --max-time "${HEALTH_TIMEOUT:-4}" \
+      -H "User-Agent: ${USER_AGENT}" \
+      "$url" >/dev/null
+  elif command -v wget >/dev/null 2>&1; then
+    wget -qO- "$url" \
+      --header="User-Agent: ${USER_AGENT}" \
+      --timeout="${HEALTH_TIMEOUT:-4}" >/dev/null
+  else
+    # Fallback: bash /dev/tcp (liveness only, no HTTP headers)
+    exec 3<>"/dev/tcp/${HOST}/${PORT}" && exec 3>&-
+  fi
 }
 
 fail=0