docs: document Keycloak hostname fix, session log analysis, and healthcheck updates

- Added detailed session log (2026-03-10) to document Keycloak hostname root cause and resolution, Git push network issue analysis, and Alertmanager permission fix.
- Updated `.env` to fix Keycloak hostname configuration (`KC_HOSTNAME`) and remove deprecated `KC_HOSTNAME_STRICT_HTTPS`.
- Enhanced Docker Compose healthchecks for multiple services (e.g., Mailpit, PgAdmin, Alertmanager).

Signed-off-by: Stefan Mogeritsch <stefan.mo.co@gmail.com>

dc-ops.yaml

@@ -14,6 +14,11 @@ services:
     ports:
       - "${MAILPIT_WEB_PORT:-8025:8025}" # Web UI
       - "${MAILPIT_SMTP_PORT:-1025:1025}" # SMTP Port
+    healthcheck:
+      test: [ "CMD", "wget", "--spider", "-q", "http://localhost:8025/" ]
+      interval: 30s
+      timeout: 10s
+      retries: 3
     networks:
       meldestelle-network:
 
@@ -30,6 +35,11 @@ services:
       PGADMIN_DEFAULT_PASSWORD: "${PGADMIN_PASSWORD:-pgadmin}"
     volumes:
       - "pgadmin-data:/var/lib/pgadmin"
+    healthcheck:
+      test: [ "CMD", "wget", "--spider", "-q", "http://localhost:80/" ]
+      interval: 30s
+      timeout: 10s
+      retries: 3
     networks:
       meldestelle-network:
         aliases:
@@ -46,6 +56,11 @@ services:
     depends_on:
       postgres:
         condition: "service_healthy"
+    healthcheck:
+      test: [ "CMD", "wget", "--spider", "-q", "http://localhost:9187/metrics" ]
+      interval: 30s
+      timeout: 10s
+      retries: 3
     networks:
       meldestelle-network:
         aliases:
@@ -55,13 +70,18 @@ services:
   alertmanager:
     image: "${ALERTMANAGER_IMAGE:-prom/alertmanager:v0.29.0}"
     container_name: "${PROJECT_NAME:-meldestelle}-alertmanager"
-    restart: no
+    restart: unless-stopped
     ports:
       - "${ALERTMANAGER_PORT:-9093:9093}"
     volumes:
-      - ./config/docker/monitoring/alertmanager/alertmanager.yaml:/etc/alertmanager/alertmanager.yaml
+      - "./config/docker/monitoring/alertmanager/alertmanager.yaml:/etc/alertmanager/alertmanager.yaml:Z"
     command:
       - --config.file=/etc/alertmanager/alertmanager.yaml
+    healthcheck:
+      test: [ "CMD", "wget", "--spider", "-q", "http://localhost:9093/-/healthy" ]
+      interval: 30s
+      timeout: 10s
+      retries: 3
     profiles: [ "ops", "all" ]
     networks:
       meldestelle-network:
@@ -72,7 +92,7 @@ services:
   prometheus:
     image: "${PROMETHEUS_IMAGE:-prom/prometheus:v3.7.3}"
     container_name: "${PROJECT_NAME:-meldestelle}-prometheus"
-    restart: no
+    restart: unless-stopped
     ports:
       - "${PROMETHEUS_PORT:-9090:9090}"
     volumes:
@@ -99,7 +119,7 @@ services:
   grafana:
     image: "${GF_IMAGE:-grafana/grafana:12.3}"
     container_name: "${PROJECT_NAME:-meldestelle}-grafana"
-    restart: no
+    restart: unless-stopped
     environment:
       GF_SECURITY_ADMIN_USER: "${GF_ADMIN_USER:-gf-admin}"
       GF_SECURITY_ADMIN_PASSWORD: "${GF_ADMIN_PASSWORD:-gf-password}"