fix(gost): use fixed username and proper healthcheck

- change gost username from email to fixed 'gost' to avoid @ symbol
  breaking proxy url parsing
- fix healthcheck to make real proxy request to httpbin.org instead of
  invalid spider request to proxy port
- increase healthcheck interval to 60s and timeout to 15s

.env.example

@@ -405,7 +405,7 @@ CLOUDFLARE_TUNNEL_TOKEN=
 # Use this to access OpenAI/Anthropic/Google APIs from restricted regions.
 
 # Credentials (auto-generated)
-GOST_USERNAME=
+GOST_USERNAME=gost
 GOST_PASSWORD=
 
 # Proxy URL for AI services (auto-generated: http://user:pass@gost:8080)

docker-compose.yml

@@ -359,11 +359,11 @@ services:
       - "-F"
       - "${GOST_UPSTREAM_PROXY}"
     healthcheck:
-      test: ["CMD-SHELL", "wget -q --spider http://${GOST_USERNAME}:${GOST_PASSWORD}@localhost:8080 || exit 1"]
-      interval: 30s
-      timeout: 10s
+      test: ["CMD-SHELL", "wget -qO- --proxy=on -e http_proxy=http://${GOST_USERNAME}:${GOST_PASSWORD}@localhost:8080 https://httpbin.org/ip >/dev/null 2>&1 || exit 1"]
+      interval: 60s
+      timeout: 15s
       retries: 3
-      start_period: 5s
+      start_period: 10s
     logging:
       driver: "json-file"
       options:

scripts/03_generate_secrets.sh

@@ -45,7 +45,6 @@ EMAIL_VARS=(
     "DASHBOARD_USERNAME"
     "DOCLING_USERNAME"
     "FLOWISE_USERNAME"
-    "GOST_USERNAME"
     "LANGFUSE_INIT_USER_EMAIL"
     "LETSENCRYPT_EMAIL"
     "LIGHTRAG_USERNAME"
@@ -80,6 +79,7 @@ declare -A VARS_TO_GENERATE=(
     ["ENCRYPTION_KEY"]="hex:64" # Langfuse Encryption Key (32 bytes -> 64 hex chars)
     ["FLOWISE_PASSWORD"]="password:32"
     ["GOST_PASSWORD"]="password:32"
+    ["GOST_USERNAME"]="fixed:gost"
     ["GRAFANA_ADMIN_PASSWORD"]="password:32"
     ["JWT_SECRET"]="base64:64" # 48 bytes -> 64 chars
     ["LANGFUSE_INIT_PROJECT_PUBLIC_KEY"]="langfuse_pk:32"