fix: healthchecks and add standard port sync server access (#404)

- Fix healthchecks to use wget instead of curl (curl not available in Alpine)
- Use 127.0.0.1 instead of localhost (resolves correctly in containers)
- Fix syncserver healthcheck to use / instead of /health (no /health endpoint)
- Add /taskchampion/ path in nginx for sync server on standard port 443
- Update example.frontend.env to use new /taskchampion/ path

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: cfsmp3

docker-compose.yml

@@ -12,7 +12,7 @@ services:
     # env_file:
     # - ./frontend/.env
     healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:80"]
+      test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:80"]
       interval: 30s
       timeout: 10s
       retries: 3
@@ -30,7 +30,7 @@ services:
     env_file:
       - ./backend/.env
     healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:8000/health"]
       interval: 30s
       timeout: 10s
       retries: 3
@@ -44,7 +44,8 @@ services:
     networks:
       - tasknetwork
     healthcheck:
-      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
+      # Note: taskchampion-sync-server doesn't have a /health endpoint, use root
+      test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:8080/"]
       interval: 30s
       timeout: 10s
       retries: 3

production/example.frontend.env

@@ -1,3 +1,5 @@
 VITE_BACKEND_URL="https://your-domain.com/"
 VITE_FRONTEND_URL="https://your-domain.com"
-VITE_CONTAINER_ORIGIN="https://your-domain.com:8080/"
+# Use standard port 443 with /taskchampion/ path (recommended)
+VITE_CONTAINER_ORIGIN="https://your-domain.com/taskchampion/"
+# Or use legacy port 8080: VITE_CONTAINER_ORIGIN="https://your-domain.com:8080/"

production/example.nginx.conf

@@ -171,6 +171,17 @@ server {
         proxy_read_timeout 86400;
     }
 
+    # Taskchampion sync server on standard port 443
+    # Users can configure: task config sync.server.url https://your-domain.com/taskchampion/
+    location /taskchampion/ {
+        proxy_pass http://127.0.0.1:8081/;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
     # Frontend (default)
     location / {
         proxy_pass http://127.0.0.1:3000;
@@ -182,7 +193,7 @@ server {
     }
 }
 
-# Taskchampion sync server (port 8080 with SSL)
+# Taskchampion sync server (port 8080 with SSL) - Legacy support
 server {
     listen 8080 ssl http2;
     listen [::]:8080 ssl http2;