fix: update semaphore service configuration in docker-compose

docker-compose/docker-compose-semaphore.yml

@@ -1,22 +1,32 @@
+# docker-compose/docker-compose-semaphore.yml
+
 services:
   semaphore:
-    image: git.internet-master.cz/jakub/semaphore:latest
+    # Official upstream image, same version as the custom build.
+    # Changing image and version separately keeps failures diagnosable.
+    image: semaphoreui/semaphore:v2.18.3
     container_name: semaphore
     user: "0:0"
     ports:
       - "3008:3000"
     environment:
-      SEMAPHORE_DB_DIALECT: bolt
-      SEMAPHORE_DB_PATH: /etc/semaphore/semaphore.db.bolt
+      # Database config lives in /etc/semaphore/config.json
       SEMAPHORE_TMP_PATH: /var/lib/semaphore/projects
       SEMAPHORE_ADMIN: admin
       SEMAPHORE_ADMIN_NAME: admin
       SEMAPHORE_ADMIN_EMAIL: admin@localhost
-      SEMAPHORE_ADMIN_PASSWORD: changeme
-      SEMAPHORE_ACCESS_KEY_ENCRYPTION: "rZffGjw4BGlwoM+66fStJ4Pg+ivLc5ghtty3yoscltY="
+    env_file:
+      # Absolute path — the deploy dir is wiped on every playbook run
+      - /data/compose/semaphore/semaphore.env
     volumes:
       - /data/compose/semaphore/db:/etc/semaphore
       - /data/compose/semaphore/projects:/var/lib/semaphore/projects
       - /data/compose/semaphore/backups:/opt/mikrotik_backups/
       - /data/compose/semaphore/ansible.cfg:/etc/ansible/ansible.cfg:ro
+    healthcheck:
+      test: ["CMD-SHELL", "wget -qO- http://127.0.0.1:3000/api/ping >/dev/null || exit 1"]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+      start_period: 20s
     restart: unless-stopped