bump to alpine 3.18

Dockerfile

@@ -2,6 +2,7 @@ ARG ALPINE_VERSION=3.18
 FROM alpine:${ALPINE_VERSION}
 LABEL Maintainer="Matthias Hemmerich matthias+code@mailbro.de"
 LABEL Description="Forked from https://github.com/TrafeX/docker-php-nginx, Lightweight container with Nginx 1.20 & PHP 8.0 based on Alpine Linux."
+
 # Setup document root
 WORKDIR /var/www/html
 
@@ -12,8 +13,8 @@ RUN apk update \
   nginx \
   php82 \
   php82-fpm \
-  supervisor \
-  php --version
+  supervisor
+
 # Configure nginx
 COPY config/nginx.conf /etc/nginx/nginx.conf
 
@@ -21,20 +22,24 @@ COPY config/nginx.conf /etc/nginx/nginx.conf
 COPY config/fpm-pool.conf /etc/php82/php-fpm.d/www.conf
 COPY config/php.ini /etc/php82/conf.d/custom.ini
 
+RUN mkdir /etc/supervisor.d \
+  && \
+  chown -R nobody.nobody /var/www/html /run /var/lib/nginx /var/log/nginx
+
 # Configure supervisord
-COPY config/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
-
-# Make sure files/folders needed by the processes are accessable when they run under the nobody user
-RUN chown -R nobody.nobody /var/www/html /run /var/lib/nginx /var/log/nginx
-
-# Switch to use a non-root user from here on
-USER nobody
+COPY config/supervisord.conf /etc/supervisor.d/supervisord.conf
 
 # Add application
 COPY --chown=nobody app/ /var/www/html/
 
+# Switch to use a non-root user from here on
+USER nobody
+
 # Expose the port nginx is reachable on
 EXPOSE 80
 
 # Let supervisord start nginx & php-fpm
-CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
+CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor.d/supervisord.conf"]
+
+# Configure a healthcheck to validate that everything is up & running
+HEALTHCHECK --timeout=10s CMD curl --silent --fail http://127.0.0.1:80/fpm-ping

docker-compose.yml

@@ -0,0 +1,20 @@
+---
+version: "3"
+
+services:
+  refund-form:
+    image: codeberg.org/angestoepselt/refund-form:latest
+    container_name: refund-form
+    restart: unless-stopped
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.refund-secure.rule=Host(`auslagen.z31.it`)"
+      - "traefik.http.routers.refund-secure.entrypoints=websecure"
+      - "traefik.http.routers.refund-secure.tls.certresolver=letsencrypt"
+    networks:
+      - proxy
+
+networks:
+  proxy:
+    external: true