.tip

Apr 11, 2026 · one of the small things

HEALTHCHECK tells the orchestrator when the app is actually up

A container is "running" the moment the process starts, which is before the app can serve a request. A health check makes "up" mean "answering".

HEALTHCHECK --interval=10s --timeout=3s --start-period=20s \
  CMD curl -fsS http://localhost:3000/health || exit 1

Compose waits on it with depends_on: condition: service_healthy. Kubernetes has its own probes and ignores this one, so set both if you deploy there.

dockeroperations

~/tips/today — 2026-09-04

~cat tips/today

Session cookies: HttpOnly, Secure, SameSite=Lax

securityhttp

Three attributes, each closing a class of attack. HttpOnly keeps scripts from reading it. Secure keeps it off plain HTTP. SameSite=Lax stops it being sent on cross-site POSTs, which is most CSRF.

Set-Cookie: session=...; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=1209600

Strict breaks arriving from an external link while logged in. Lax is the default worth keeping.

↵ open y yesterday l ls /tips

esc close