Ensure liveness, readiness and startup probes on all workloads

Every container in every Deployment/StatefulSet now defines all three
probes. The paperless-ngx consume CronJob intentionally has none (batch
workload).

- Add probes: apache-tika, calibre-web-automated, cyberchef, gotenberg,
  homeassistant, patchmon-backend, samba (tcp/445), teamspeak-server
  (tcp/30033), zipline (/api/healthcheck)
- Fix voucher-vault null probe values with real defaults
- Fix startup-probe semantics in template-chart and rallly (no
  initialDelaySeconds, generous failureThreshold)
- Switch outline probes to its /_health endpoint
- Add readiness/startup probes to satisfactory
- Add startup probes to matrix-synapse, matrix-delegation-nginx,
  paperless-server, patchmon-frontend, urlaubsverwaltung
- Major version bump for all published charts

outline/Chart.yaml

@@ -4,7 +4,7 @@ description: A Helm chart to deploy Outline on Kubernetes
 
 type: application
 
-version: 1.4.0+up1.9.2
+version: 2.0.0+up1.9.2
 appVersion: 1.9.2
 
 maintainers:

outline/templates/outline.sfs.yaml

@@ -80,18 +80,31 @@ spec:
             - containerPort: 3000
               protocol: TCP
               name: http
+          # Outline exposes a dedicated health endpoint at /_health
+          # (also used by the upstream Docker HEALTHCHECK).
           livenessProbe:
             httpGet:
-              path: /
+              path: /_health
               port: 3000
-            initialDelaySeconds: 30
             periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 3
           readinessProbe:
             httpGet:
-              path: /
+              path: /_health
               port: 3000
-            initialDelaySeconds: 10
             periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 3
+          # The startup probe gates liveness/readiness. Outline runs database
+          # migrations on startup: budget 10s * 30 = 300s.
+          startupProbe:
+            httpGet:
+              path: /_health
+              port: 3000
+            periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 30
           resources:
             requests:
               memory: "{{ .Values.outline.resources.requests.memory }}"