Ensure liveness, readiness and startup probes on all workloads

Every container in every Deployment/StatefulSet now defines all three
probes. The paperless-ngx consume CronJob intentionally has none (batch
workload).

- Add probes: apache-tika, calibre-web-automated, cyberchef, gotenberg,
  homeassistant, patchmon-backend, samba (tcp/445), teamspeak-server
  (tcp/30033), zipline (/api/healthcheck)
- Fix voucher-vault null probe values with real defaults
- Fix startup-probe semantics in template-chart and rallly (no
  initialDelaySeconds, generous failureThreshold)
- Switch outline probes to its /_health endpoint
- Add readiness/startup probes to satisfactory
- Add startup probes to matrix-synapse, matrix-delegation-nginx,
  paperless-server, patchmon-frontend, urlaubsverwaltung
- Major version bump for all published charts

zipline/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.3.0+up4.6.4
+version: 2.0.0+up4.6.4
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

zipline/templates/zipline.sfs.yaml

@@ -44,6 +44,12 @@ spec:
             - name: "zipline-server"
               containerPort: 3000
               protocol: TCP
+          livenessProbe:
+            {{- toYaml .Values.zipline.livenessProbe | nindent 12 }}
+          readinessProbe:
+            {{- toYaml .Values.zipline.readinessProbe | nindent 12 }}
+          startupProbe:
+            {{- toYaml .Values.zipline.startupProbe | nindent 12 }}
           volumeMounts:
             - name: zipline-volume
               mountPath: /zipline/uploads

zipline/values.yaml

@@ -7,6 +7,31 @@ config:
   domain: null
   maxUploadFileSize: 30m
 zipline:
+  # Zipline v4 exposes /api/healthcheck (checks server and database health);
+  # the endpoint is enabled by default (config.features.healthcheck).
+  livenessProbe:
+    httpGet:
+      path: /api/healthcheck
+      port: zipline-server
+    periodSeconds: 10
+    timeoutSeconds: 5
+    failureThreshold: 3
+  readinessProbe:
+    httpGet:
+      path: /api/healthcheck
+      port: zipline-server
+    periodSeconds: 10
+    timeoutSeconds: 5
+    failureThreshold: 3
+  # The startup probe gates liveness/readiness. Zipline runs database
+  # migrations on startup, so grant a generous budget: 10s * 30 = 300s.
+  startupProbe:
+    httpGet:
+      path: /api/healthcheck
+      port: zipline-server
+    periodSeconds: 10
+    timeoutSeconds: 5
+    failureThreshold: 30
   resources:
     requests:
       cpu: 0.1