From d107cb4b50a651d593a0780884e3ed617195b58d Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 8 Apr 2026 18:52:27 +0000
Subject: [PATCH 1/2] Initial plan


From 20033d37b6d1846a02958d77e93075262ac4275a Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 8 Apr 2026 18:55:32 +0000
Subject: [PATCH 2/2] perf: tune healthcheck intervals for squid and api-proxy
 containers

Agent-Logs-Url: https://github.com/github/gh-aw-firewall/sessions/28aaf10b-db35-49dc-90de-65079b972a43
---
 docs/api-proxy-sidecar.md |  6 +++---
 src/docker-manager.ts     | 12 ++++++------
 src/types.ts              |  8 ++++----
 3 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/docs/api-proxy-sidecar.md b/docs/api-proxy-sidecar.md
index 22e23b6c..5df4740f 100644
--- a/docs/api-proxy-sidecar.md
+++ b/docs/api-proxy-sidecar.md
@@ -284,10 +284,10 @@ The sidecar container:
 ### Health check
 
 Docker healthcheck on the `/health` endpoint (port 10000):
-- **Interval**: 5s
-- **Timeout**: 3s
+- **Interval**: 1s
+- **Timeout**: 1s
 - **Retries**: 5
-- **Start period**: 5s
+- **Start period**: 2s
 
 ## Troubleshooting
 
diff --git a/src/docker-manager.ts b/src/docker-manager.ts
index b5f32b91..7787b3bf 100644
--- a/src/docker-manager.ts
+++ b/src/docker-manager.ts
@@ -475,10 +475,10 @@ export function generateDockerCompose(
     volumes: squidVolumes,
     healthcheck: {
       test: ['CMD', 'nc', '-z', 'localhost', '3128'],
-      interval: '5s',
-      timeout: '3s',
+      interval: '1s',
+      timeout: '1s',
       retries: 5,
-      start_period: '10s',
+      start_period: '2s',
     },
     ports: [`${SQUID_PORT}:${SQUID_PORT}`],
     // Security hardening: Drop unnecessary capabilities
@@ -1512,10 +1512,10 @@ export function generateDockerCompose(
       },
       healthcheck: {
         test: ['CMD', 'curl', '-f', `http://localhost:${API_PROXY_HEALTH_PORT}/health`],
-        interval: '5s',
-        timeout: '3s',
+        interval: '1s',
+        timeout: '1s',
         retries: 5,
-        start_period: '5s',
+        start_period: '2s',
       },
       // Security hardening: Drop all capabilities
       cap_drop: ['ALL'],
diff --git a/src/types.ts b/src/types.ts
index b4b4298f..010c4f10 100644
--- a/src/types.ts
+++ b/src/types.ts
@@ -1303,10 +1303,10 @@ export interface DockerService {
    * ```typescript
    * {
    *   test: ['CMD', 'squidclient', '-h', 'localhost', '-p', '3128', 'http://localhost/'],
-   *   interval: '5s',
-   *   timeout: '3s',
-   *   retries: 3,
-   *   start_period: '10s'
+   *   interval: '1s',
+   *   timeout: '1s',
+   *   retries: 5,
+   *   start_period: '2s'
    * }
    * ```
    */