fix(rust): redis auth + users startup probe

apps/nxtgauge-backend-rust/base/payments-deployment.yaml

@@ -27,18 +27,16 @@ spec:
             - secretRef:
                 name: nxtgauge-backend-rust-secrets
           readinessProbe:
-            httpGet:
+            tcpSocket:
-              path: /health
               port: 9116
             initialDelaySeconds: 10
             periodSeconds: 10
             timeoutSeconds: 3
-            failureThreshold: 3
+            failureThreshold: 6
           livenessProbe:
-            httpGet:
+            tcpSocket:
-              path: /health
               port: 9116
-            initialDelaySeconds: 20
+            initialDelaySeconds: 30
             periodSeconds: 20
             timeoutSeconds: 3
             failureThreshold: 5

apps/nxtgauge-backend-rust/base/secret.yaml

@@ -7,7 +7,8 @@ type: Opaque
 stringData:
   DATABASE_URL: "postgresql://postgres:chandan2026%401@pg-postgresql.data.svc.cluster.local:5432/nxtgauge"
   JWT_SECRET: "bPU0RQ/N7JW8CDCioe6AFBw/lBLTm++pGtta20pcsTX36p3OyheplgUyiD66OCuV"
-  REDIS_URL: "redis://redis-master.data.svc.cluster.local:6379"
+  # Password contains '@', so it must be URL-encoded as %40.
+  REDIS_URL: "redis://:chandan2026%401@redis-master.data.svc.cluster.local:6379"
   SMTP_HOST: "smtp.zeptomail.in"
   SMTP_PORT: "587"
   SMTP_USER: "emailapikey"

apps/nxtgauge-backend-rust/base/users-deployment.yaml

@@ -21,11 +21,22 @@ spec:
           ports:
             - containerPort: 9101
               name: http
+          env:
+            # The image currently defaults to a different port (it exposes 8000/tcp).
+            # Force the service to bind to the port our Service/ConfigMap expects.
+            - name: PORT
+              value: "9101"
           envFrom:
             - configMapRef:
                 name: nxtgauge-backend-rust-config
             - secretRef:
                 name: nxtgauge-backend-rust-secrets
+          startupProbe:
+            tcpSocket:
+              port: 9101
+            periodSeconds: 5
+            timeoutSeconds: 1
+            failureThreshold: 120
           readinessProbe:
             httpGet:
               path: /health