docker compose restart on failure vs always