2026-07-05 — Sepia Phase1 Hardening Healthchecks

Summary

Added the last missing healthchecks for the phase 1 hardening plan on Sepia.

Changes

• Added a caddy healthcheck using the image's built-in wget.
• Added a collectd healthcheck using pidof collectd.

Verification

• docker compose config passed.
• The updated services were recreated successfully.
• collectd reported healthy.
• caddy came back up and was progressing through health startup after the recreate.

Notes

This was the final missing healthcheck work from the infrastructure hardening plan before moving on to daemon-level hardening.