Health Checks Failing
⚙️Configuration🏬Self-hosted❓Question❌Unsolved
I've been running Zitadel as a system service, with a system hosted postgres. --- I have recently just converted to Docker and while evertyhing is running, I can't get health checks to work properly.
1. Should
2. Why are my health checks failing? -- The services are running, and logins working without issue.
Server Configuration
- Caddy - Server hosted direct on server.
- I build with xcaddy for Cloudflare support and accurate
- Postgres - Server hosted -- not docker
- Docker
- Zitadel-api
- zitadel-login
/home/zitadel/.env
docker compose pull
docker compose up -d
1. Should
zitadel-apizitadel-api be rwrw or roro?2. Why are my health checks failing? -- The services are running, and logins working without issue.
Server Configuration
- Caddy - Server hosted direct on server.
- I build with xcaddy for Cloudflare support and accurate
- Postgres - Server hosted -- not docker
- Docker
- Zitadel-api
- zitadel-login
/home/zitadel/.env
docker compose pull
docker compose up -d
docker-compose.yamldocker-compose.yamlservices:
zitadel:
image: ghcr.io/zitadel/zitadel:${ZITADEL_VERSION}
user: "1000:1000"
restart: always
command: start-from-setup --config /home/zitadel/config.yaml --masterkeyFile /home/zitadel/zitadel-masterkey
network_mode: host
volumes:
- /home/zitadel:/home/zitadel
healthcheck:
test: ["CMD", "/app/zitadel", "ready"]
interval: 10s
timeout: 30s
retries: 12
start_period: 20s
zitadel-login:
image: ghcr.io/zitadel/zitadel-login:${ZITADEL_VERSION}
user: "1000:1000"
restart: always
network_mode: service:zitadel
environment:
ZITADEL_API_URL: "http://localhost:8080"
NEXT_PUBLIC_BASE_PATH: /ui/v2/login
ZITADEL_SERVICE_USER_TOKEN_FILE: /home/zitadel/login-client.pat
volumes:
- /home/zitadel:/home/zitadel:ro
depends_on:
zitadel:
#condition: service_healthy
condition: service_started
healthcheck:
test: ["CMD", "/bin/sh", "-c", "node /app/healthcheck.js http://localhost:3000/ui/v2/login/healthy"]
interval: 10s
timeout: 30s
retries: 12
start_period: 20sservices:
zitadel:
image: ghcr.io/zitadel/zitadel:${ZITADEL_VERSION}
user: "1000:1000"
restart: always
command: start-from-setup --config /home/zitadel/config.yaml --masterkeyFile /home/zitadel/zitadel-masterkey
network_mode: host
volumes:
- /home/zitadel:/home/zitadel
healthcheck:
test: ["CMD", "/app/zitadel", "ready"]
interval: 10s
timeout: 30s
retries: 12
start_period: 20s
zitadel-login:
image: ghcr.io/zitadel/zitadel-login:${ZITADEL_VERSION}
user: "1000:1000"
restart: always
network_mode: service:zitadel
environment:
ZITADEL_API_URL: "http://localhost:8080"
NEXT_PUBLIC_BASE_PATH: /ui/v2/login
ZITADEL_SERVICE_USER_TOKEN_FILE: /home/zitadel/login-client.pat
volumes:
- /home/zitadel:/home/zitadel:ro
depends_on:
zitadel:
#condition: service_healthy
condition: service_started
healthcheck:
test: ["CMD", "/bin/sh", "-c", "node /app/healthcheck.js http://localhost:3000/ui/v2/login/healthy"]
interval: 10s
timeout: 30s
retries: 12
start_period: 20sroot@auth-stg:/home/zitadel# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
34c58d4cd3f5 ghcr.io/zitadel/zitadel-login:v4.15.0 "/app/entrypoint.sh …" 21 minutes ago Up 21 minutes (unhealthy) zitadel-zitadel-login-1
138aa00dacfb ghcr.io/zitadel/zitadel:v4.15.0 "/app/zitadel start …" 21 minutes ago Up 21 minutes (unhealthy) zitadel-zitadel-1
root@auth-stg:/home/zitadel# docker exec -it zitadel-zitadel-1 /app/zitadel ready
Error: not ready
root@auth-stg:/home/zitadel# docker exec -it zitadel-zitadel-1 /app/zitadel ready
echo $?
Error: not ready
1
root@auth-stg:/home/zitadel# docker inspect --format='{{json .State.Health}}' zitadel-zitadel-1
{"Status":"unhealthy","FailingStreak":126,"Log":[{"Start":"2026-05-05T18:55:37.223852145Z","End":"2026-05-05T18:55:37.648911061Z","ExitCode":1,"Output":"Error: not ready\n"},{"Start":"2026-05-05T18:55:47.650860055Z","End":"2026-05-05T18:55:48.039000306Z","ExitCode":1,"Output":"Error: not ready\n"},{"Start":"2026-05-05T18:55:58.039632477Z","End":"2026-05-05T18:55:58.43564057Z","ExitCode":1,"Output":"Error: not ready\n"},{"Start":"2026-05-05T18:56:08.438698459Z","End":"2026-05-05T18:56:08.837877947Z","ExitCode":1,"Output":"Error: not ready\n"},{"Start":"2026-05-05T18:56:18.838854785Z","End":"2026-05-05T18:56:19.231669943Z","ExitCode":1,"Output":"Error: not ready\n"}]}root@auth-stg:/home/zitadel# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
34c58d4cd3f5 ghcr.io/zitadel/zitadel-login:v4.15.0 "/app/entrypoint.sh …" 21 minutes ago Up 21 minutes (unhealthy) zitadel-zitadel-login-1
138aa00dacfb ghcr.io/zitadel/zitadel:v4.15.0 "/app/zitadel start …" 21 minutes ago Up 21 minutes (unhealthy) zitadel-zitadel-1
root@auth-stg:/home/zitadel# docker exec -it zitadel-zitadel-1 /app/zitadel ready
Error: not ready
root@auth-stg:/home/zitadel# docker exec -it zitadel-zitadel-1 /app/zitadel ready
echo $?
Error: not ready
1
root@auth-stg:/home/zitadel# docker inspect --format='{{json .State.Health}}' zitadel-zitadel-1
{"Status":"unhealthy","FailingStreak":126,"Log":[{"Start":"2026-05-05T18:55:37.223852145Z","End":"2026-05-05T18:55:37.648911061Z","ExitCode":1,"Output":"Error: not ready\n"},{"Start":"2026-05-05T18:55:47.650860055Z","End":"2026-05-05T18:55:48.039000306Z","ExitCode":1,"Output":"Error: not ready\n"},{"Start":"2026-05-05T18:55:58.039632477Z","End":"2026-05-05T18:55:58.43564057Z","ExitCode":1,"Output":"Error: not ready\n"},{"Start":"2026-05-05T18:56:08.438698459Z","End":"2026-05-05T18:56:08.837877947Z","ExitCode":1,"Output":"Error: not ready\n"},{"Start":"2026-05-05T18:56:18.838854785Z","End":"2026-05-05T18:56:19.231669943Z","ExitCode":1,"Output":"Error: not ready\n"}]}
