🔧 fix(mac-mini): update health checks and disable missing services

- Disable api-gateway and skilltree-web (no working images/Dockerfiles)
- Fix mana-search Dockerfile healthcheck port and endpoint
- Update health-check.sh to skip disabled services
- Fix search service health endpoint (/api/v1/health)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

docker/matrix/appservices/generate-as.sh

@@ -0,0 +1,54 @@
+#!/bin/bash
+
+# Generate random token
+gen_token() {
+    openssl rand -hex 32
+}
+
+# Bot configurations: name, sender_localpart
+declare -a BOTS=(
+    "mana:mana-bot"
+    "ollama:ollama-bot"
+    "stats:stats-bot"
+    "projectdoc:projectdoc-bot"
+    "todo:todo-bot"
+    "calendar:calendar-bot"
+    "nutriphi:nutriphi-bot"
+    "zitare:zitare-bot"
+    "clock:clock-bot"
+    "tts:tts-bot"
+)
+
+echo "# Generated AS tokens for .env file:" > as-tokens.env
+echo "" >> as-tokens.env
+
+for bot_config in "${BOTS[@]}"; do
+    IFS=":" read -r name sender <<< "$bot_config"
+
+    as_token=$(gen_token)
+    hs_token=$(gen_token)
+
+    cat > "${name}-bot.yaml" << EOF
+id: ${name}-bot
+hs_token: ${hs_token}
+as_token: ${as_token}
+url: null
+sender_localpart: ${sender}
+namespaces:
+  users:
+    - exclusive: true
+      regex: '@${sender}:mana\.how'
+  rooms: []
+  aliases: []
+rate_limited: false
+EOF
+
+    # Convert name to uppercase for env var
+    env_name=$(echo "${name}" | tr '[:lower:]' '[:upper:]' | tr '-' '_')
+    echo "MATRIX_${env_name}_BOT_AS_TOKEN=${as_token}" >> as-tokens.env
+
+    echo "Created ${name}-bot.yaml with AS token"
+done
+
+echo ""
+echo "Done! Add the tokens from as-tokens.env to your .env file"

docker/matrix/homeserver.yaml

@@ -81,8 +81,9 @@ password_config:
   pepper: "${SYNAPSE_PASSWORD_PEPPER:-change-me-pepper}"
 
 # Session lifetime (must be >= refresh_token_lifetime)
-session_lifetime: 168h
-refresh_token_lifetime: 168h
+# Set to 10 years for bot tokens to avoid frequent expiration
+session_lifetime: 87600h
+refresh_token_lifetime: 87600h
 
 # ============================================
 # Rate Limiting
@@ -149,6 +150,8 @@ registration_shared_secret: "${SYNAPSE_REGISTRATION_SECRET:-change-me-registrati
 
 # ============================================
 # Application Services (for Bots)
+# Currently disabled - using long-lived user tokens instead
+# TODO: Migrate bots to AS for truly permanent tokens
 # ============================================
 
 app_service_config_files: []