crafty-controller: python3 TLS healthcheck (image has no curl); controller-side probe http->tcp (8443 is TLS)

templates/crafty-controller/.felhom.yml

@@ -58,5 +58,5 @@ app_info:
 # --- Controller-side health probe ---
 healthcheck:
   checks:
-    - type: http
+    - type: tcp
       port: 8443

templates/crafty-controller/docker-compose.yml

@@ -26,11 +26,11 @@ services:
         limits:
           memory: 2048M
     healthcheck:
-      test: ["CMD", "curl", "-fk", "https://localhost:8443"]
+      test: ["CMD", "/usr/bin/python3", "-c", "import socket,ssl; ssl._create_unverified_context().wrap_socket(socket.create_connection(('127.0.0.1',8443),timeout=3)).close()"]
       interval: 30s
       timeout: 5s
       retries: 3
-      start_period: 30s
+      start_period: 60s
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.crafty-controller.rule=Host(`${SUBDOMAIN}.${DOMAIN}`)"