diff --git a/000-default.conf b/000-default.conf deleted file mode 100644 index 44d00f7..0000000 --- a/000-default.conf +++ /dev/null @@ -1,10 +0,0 @@ - - ServerAdmin webmaster@localhost - DocumentRoot /var/www/ - - - Options Indexes FollowSymLinks - AllowOverride All - Require all granted - - \ No newline at end of file diff --git a/Dockerfile b/Dockerfile index bdb76a8..6ecc397 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,45 @@ -FROM php:7-apache -COPY 000-default.conf /etc/apache2/sites-available/000-default.conf -RUN a2enmod rewrite -COPY app /var/www/ -RUN chown -R www-data:www-data /var/www +ARG ALPINE_VERSION=3.14 +FROM alpine:${ALPINE_VERSION} +LABEL Maintainer="Matthias Hemmerich matthias+code@mailbro.de" +LABEL Description="Forked from https://github.com/TrafeX/docker-php-nginx, Lightweight container with Nginx 1.20 & PHP 8.0 based on Alpine Linux." +# Setup document root +WORKDIR /var/www/html + +# Install packages and remove default server definition +RUN apk add --no-cache \ + curl \ + nginx \ + php8 \ + php8-fpm \ + supervisor + +# Create symlink so programs depending on `php` still function +RUN ln -s /usr/bin/php8 /usr/bin/php + +# Configure nginx +COPY config/nginx.conf /etc/nginx/nginx.conf + +# Configure PHP-FPM +COPY config/fpm-pool.conf /etc/php8/php-fpm.d/www.conf +COPY config/php.ini /etc/php8/conf.d/custom.ini + +# Configure supervisord +COPY config/supervisord.conf /etc/supervisor/conf.d/supervisord.conf + +# Make sure files/folders needed by the processes are accessable when they run under the nobody user +RUN chown -R nobody.nobody /var/www/html /run /var/lib/nginx /var/log/nginx + +# Switch to use a non-root user from here on +USER nobody + +# Add application +COPY --chown=nobody app/ /var/www/html/ + +# Expose the port nginx is reachable on EXPOSE 80 -CMD ["/usr/sbin/apache2ctl", "-D", "FOREGROUND"] \ No newline at end of file + +# Let supervisord start nginx & php-fpm +CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"] + +# Configure a healthcheck to validate that everything is up&running +HEALTHCHECK --timeout=10s CMD curl --silent --fail http://127.0.0.1:80/fpm-ping \ No newline at end of file diff --git a/config/fpm-pool.conf b/config/fpm-pool.conf new file mode 100644 index 0000000..4be2061 --- /dev/null +++ b/config/fpm-pool.conf @@ -0,0 +1,56 @@ +[global] +; Log to stderr +error_log = /dev/stderr + +[www] +; The address on which to accept FastCGI requests. +; Valid syntaxes are: +; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on +; a specific port; +; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on +; a specific port; +; 'port' - to listen on a TCP socket to all addresses +; (IPv6 and IPv4-mapped) on a specific port; +; '/path/to/unix/socket' - to listen on a unix socket. +; Note: This value is mandatory. +listen = /run/php-fpm.sock + +; Enable status page +pm.status_path = /fpm-status + +; Ondemand process manager +pm = ondemand + +; The number of child processes to be created when pm is set to 'static' and the +; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'. +; This value sets the limit on the number of simultaneous requests that will be +; served. Equivalent to the ApacheMaxClients directive with mpm_prefork. +; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP +; CGI. The below defaults are based on a server without much resources. Don't +; forget to tweak pm.* to fit your needs. +; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand' +; Note: This value is mandatory. +pm.max_children = 100 + +; The number of seconds after which an idle process will be killed. +; Note: Used only when pm is set to 'ondemand' +; Default Value: 10s +pm.process_idle_timeout = 10s; + +; The number of requests each child process should execute before respawning. +; This can be useful to work around memory leaks in 3rd party libraries. For +; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS. +; Default Value: 0 +pm.max_requests = 1000 + +; Make sure the FPM workers can reach the environment variables for configuration +clear_env = no + +; Catch output from PHP +catch_workers_output = yes + +; Remove the 'child 10 said into stderr' prefix in the log and only show the actual message +decorate_workers_output = no + +; Enable ping page to use in healthcheck +ping.path = /fpm-ping diff --git a/config/nginx.conf b/config/nginx.conf new file mode 100644 index 0000000..1642c9b --- /dev/null +++ b/config/nginx.conf @@ -0,0 +1,95 @@ +worker_processes auto; +error_log stderr warn; +pid /run/nginx.pid; + +events { + worker_connections 1024; +} + +http { + include mime.types; + default_type application/octet-stream; + + # Define custom log format to include reponse times + log_format main_timed '$remote_addr - $remote_user [$time_local] "$request" ' + '$status $body_bytes_sent "$http_referer" ' + '"$http_user_agent" "$http_x_forwarded_for" ' + '$request_time $upstream_response_time $pipe $upstream_cache_status'; + + access_log /dev/stdout main_timed; + error_log /dev/stderr notice; + + keepalive_timeout 65; + + # Write temporary files to /tmp so they can be created as a non-privileged user + client_body_temp_path /tmp/client_temp; + proxy_temp_path /tmp/proxy_temp_path; + fastcgi_temp_path /tmp/fastcgi_temp; + uwsgi_temp_path /tmp/uwsgi_temp; + scgi_temp_path /tmp/scgi_temp; + + # Default server definition + server { + listen [::]:80 default_server; + listen 80 default_server; + server_name _; + + sendfile off; + absolute_redirect off; + + root /var/www/html; + index index.php index.html; + + location / { + # First attempt to serve request as file, then + # as directory, then fall back to index.php + try_files $uri $uri/ /index.php?q=$uri&$args; + } + + # Redirect server error pages to the static page /50x.html + error_page 500 502 503 504 /50x.html; + location = /50x.html { + root /var/lib/nginx/html; + } + + # Pass the PHP scripts to PHP-FPM listening on php-fpm.sock + location ~ \.php$ { + try_files $uri =404; + fastcgi_split_path_info ^(.+\.php)(/.+)$; + fastcgi_pass unix:/run/php-fpm.sock; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + fastcgi_param SCRIPT_NAME $fastcgi_script_name; + fastcgi_index index.php; + include fastcgi_params; + } + + location ~* \.(jpg|jpeg|gif|png|css|js|ico|xml)$ { + expires 5d; + } + + # Deny access to . files, for security + location ~ /\. { + log_not_found off; + deny all; + } + + # Allow fpm ping and status from localhost + location ~ ^/(fpm-status|fpm-ping)$ { + access_log off; + allow 127.0.0.1; + deny all; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + include fastcgi_params; + fastcgi_pass unix:/run/php-fpm.sock; + } + } + + gzip on; + gzip_proxied any; + gzip_types text/plain application/xml text/css text/js text/xml application/x-javascript text/javascript application/json application/xml+rss; + gzip_vary on; + gzip_disable "msie6"; + + # Include other server configs + include /etc/nginx/conf.d/*.conf; +} \ No newline at end of file diff --git a/config/php.ini b/config/php.ini new file mode 100644 index 0000000..e6c1917 --- /dev/null +++ b/config/php.ini @@ -0,0 +1,4 @@ +expose_php = Off + +[Date] +date.timezone="UTC" \ No newline at end of file diff --git a/config/supervisord.conf b/config/supervisord.conf new file mode 100644 index 0000000..0602f3b --- /dev/null +++ b/config/supervisord.conf @@ -0,0 +1,23 @@ +[supervisord] +nodaemon=true +logfile=/dev/null +logfile_maxbytes=0 +pidfile=/run/supervisord.pid + +[program:php-fpm] +command=php-fpm8 -F +stdout_logfile=/dev/stdout +stdout_logfile_maxbytes=0 +stderr_logfile=/dev/stderr +stderr_logfile_maxbytes=0 +autorestart=false +startretries=0 + +[program:nginx] +command=nginx -g 'daemon off;' +stdout_logfile=/dev/stdout +stdout_logfile_maxbytes=0 +stderr_logfile=/dev/stderr +stderr_logfile_maxbytes=0 +autorestart=false +startretries=0 \ No newline at end of file