feat: add requirements:health task for service health checks

Author: konradmichalik

autoload.php

@@ -51,6 +51,7 @@
 require_once(__DIR__ . '/deployer/requirements/task/check_env.php');
 require_once(__DIR__ . '/deployer/requirements/task/check_eol.php');
 require_once(__DIR__ . '/deployer/requirements/task/list.php');
+require_once(__DIR__ . '/deployer/requirements/task/health.php');
 
 /*
  * dev

deployer/requirements/config/set.php

@@ -107,6 +107,10 @@
 set('requirements_eol_warn_months', 6);
 set('requirements_eol_api_timeout', 5);
 
+// Health check
+set('requirements_check_health_enabled', true);
+set('requirements_health_url', 'http://localhost');
+
 // User / permissions
 set('requirements_user_group', 'www-data');
 set('requirements_deploy_path_permissions', '2770');

deployer/requirements/functions.php

@@ -331,6 +331,34 @@ function checkEolForProduct(string $label, string $product, string $cycle, int $
     evaluateEolStatus("$label $cycle", $match, $warnMonths);
 }
 
+/**
+ * Check if a service is active via systemctl, with pgrep fallback.
+ *
+ * Returns the matched service/process name or null if none found.
+ */
+function isServiceActive(string ...$names): ?string
+{
+    $hasSystemctl = test('command -v systemctl > /dev/null 2>&1');
+
+    foreach ($names as $name) {
+        try {
+            if ($hasSystemctl) {
+                $status = trim(run("systemctl is-active $name 2>/dev/null || true"));
+
+                if ($status === 'active') {
+                    return $name;
+                }
+            } elseif (test("pgrep -x $name > /dev/null 2>&1")) {
+                return $name;
+            }
+        } catch (RunException) {
+            continue;
+        }
+    }
+
+    return null;
+}
+
 /**
  * @return array<string, string>
  */

deployer/requirements/task/health.php

@@ -0,0 +1,83 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Deployer;
+
+use Deployer\Exception\RunException;
+
+task('requirements:health', function (): void {
+    set('requirements_rows', []);
+
+    if (!get('requirements_check_health_enabled')) {
+        return;
+    }
+
+    // 1. PHP-FPM
+    try {
+        $phpVersion = trim(run('php -r "echo PHP_MAJOR_VERSION.\'.\'.PHP_MINOR_VERSION;" 2>/dev/null'));
+        $fpmService = isServiceActive("php$phpVersion-fpm", 'php-fpm');
+
+        if ($fpmService !== null) {
+            addRequirementRow('PHP-FPM', REQUIREMENT_OK, "Active ($fpmService)");
+        } else {
+            addRequirementRow('PHP-FPM', REQUIREMENT_FAIL, 'Process not found');
+        }
+    } catch (RunException) {
+        addRequirementRow('PHP-FPM', REQUIREMENT_SKIP, 'Could not determine PHP version');
+    }
+
+    // 2. Webserver
+    $webserver = isServiceActive('nginx', 'apache2', 'httpd');
+
+    if ($webserver !== null) {
+        addRequirementRow('Webserver', REQUIREMENT_OK, "Active ($webserver)");
+    } else {
+        addRequirementRow('Webserver', REQUIREMENT_FAIL, 'No nginx, apache2 or httpd process found');
+    }
+
+    // 3. Database server
+    $db = detectDatabaseProduct();
+    $dbLabel = $db !== null ? $db['label'] : 'Database';
+    $adminCmd = ($db !== null && $db['product'] === 'mariadb') ? 'mariadb-admin' : 'mysqladmin';
+    $dbChecked = false;
+
+    try {
+        run("$adminCmd ping --silent 2>&1 || true");
+        addRequirementRow('Database server', REQUIREMENT_OK, "$dbLabel responding");
+        $dbChecked = true;
+    } catch (RunException) {
+        // Admin tool not available — fall through to process check
+    }
+
+    if (!$dbChecked) {
+        $dbProcess = isServiceActive('mysqld', 'mariadbd');
+
+        if ($dbProcess !== null) {
+            addRequirementRow('Database server', REQUIREMENT_OK, "$dbLabel process running ($dbProcess)");
+        } else {
+            addRequirementRow('Database server', REQUIREMENT_FAIL, 'No mysqld or mariadbd process found');
+        }
+    }
+
+    // 4. HTTP response
+    $url = get('requirements_health_url');
+
+    try {
+        $httpCode = (int) trim(run(
+            sprintf("curl -s -o /dev/null -w '%%{http_code}' --max-time 5 %s 2>/dev/null", escapeshellarg($url))
+        ));
+
+        if ($httpCode >= 200 && $httpCode < 500) {
+            addRequirementRow('HTTP response', REQUIREMENT_OK, "HTTP $httpCode from $url");
+        } elseif ($httpCode === 0) {
+            addRequirementRow('HTTP response', REQUIREMENT_FAIL, "No response from $url (connection refused or timeout)");
+        } else {
+            addRequirementRow('HTTP response', REQUIREMENT_FAIL, "HTTP $httpCode from $url");
+        }
+    } catch (RunException) {
+        addRequirementRow('HTTP response', REQUIREMENT_SKIP, 'curl not available');
+    }
+
+    renderRequirementsTable();
+})->desc('Check service health');