docker compose restart always vs on failure