132 lines
4.4 KiB
Docker
132 lines
4.4 KiB
Docker
FROM nginx:mainline-alpine
|
|
|
|
MAINTAINER ngineered <support@ngineered.co.uk>
|
|
|
|
ENV php_conf /etc/php7/php.ini
|
|
ENV fpm_conf /etc/php7/php-fpm.d/www.conf
|
|
ENV composer_hash 61069fe8c6436a4468d0371454cf38a812e451a14ab1691543f25a9627b97ff96d8753d92a00654c21e2212a5ae1ff36
|
|
|
|
RUN echo @testing http://nl.alpinelinux.org/alpine/edge/testing >> /etc/apk/repositories && \
|
|
sed -i -e "s/v3.4/edge/" /etc/apk/repositories && \
|
|
echo /etc/apk/respositories && \
|
|
apk update && \
|
|
apk add --no-cache bash \
|
|
openssh-client \
|
|
wget \
|
|
nginx \
|
|
supervisor \
|
|
curl \
|
|
git \
|
|
php7-fpm \
|
|
php7-pdo \
|
|
php7-pdo_mysql \
|
|
php7-mysqlnd \
|
|
php7-mysqli \
|
|
php7-mcrypt \
|
|
php7-mbstring \
|
|
php7-ctype \
|
|
php7-zlib \
|
|
php7-gd \
|
|
php7-exif \
|
|
php7-intl \
|
|
php7-sqlite3 \
|
|
php7-pdo_pgsql \
|
|
php7-pgsql \
|
|
php7-xml \
|
|
php7-xsl \
|
|
php7-curl \
|
|
php7-openssl \
|
|
php7-iconv \
|
|
php7-json \
|
|
php7-phar \
|
|
php7-soap \
|
|
php7-dom \
|
|
php7-zip \
|
|
php7-session \
|
|
python \
|
|
python-dev \
|
|
py2-pip \
|
|
augeas-dev \
|
|
openssl-dev \
|
|
ca-certificates \
|
|
dialog \
|
|
gcc \
|
|
musl-dev \
|
|
linux-headers \
|
|
libffi-dev &&\
|
|
mkdir -p /etc/nginx && \
|
|
mkdir -p /var/www/app && \
|
|
mkdir -p /run/nginx && \
|
|
mkdir -p /var/log/supervisor && \
|
|
php7 -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" && \
|
|
php7 -r "if (hash_file('SHA384', 'composer-setup.php') === '${composer_hash}') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" && \
|
|
php7 composer-setup.php --install-dir=/usr/bin --filename=composer && \
|
|
php7 -r "unlink('composer-setup.php');" && \
|
|
pip install -U pip && \
|
|
pip install -U certbot && \
|
|
mkdir -p /etc/letsencrypt/webrootauth && \
|
|
apk del gcc musl-dev linux-headers libffi-dev augeas-dev python-dev && \
|
|
ln -s /usr/bin/php7 /usr/bin/php
|
|
|
|
ADD conf/supervisord.conf /etc/supervisord.conf
|
|
|
|
# Copy our nginx config
|
|
RUN rm -Rf /etc/nginx/nginx.conf
|
|
ADD conf/nginx.conf /etc/nginx/nginx.conf
|
|
|
|
# nginx site conf
|
|
RUN mkdir -p /etc/nginx/sites-available/ && \
|
|
mkdir -p /etc/nginx/sites-enabled/ && \
|
|
mkdir -p /etc/nginx/ssl/ && \
|
|
rm -Rf /var/www/* && \
|
|
mkdir /var/www/html/
|
|
ADD conf/nginx-site.conf /etc/nginx/sites-available/default.conf
|
|
ADD conf/nginx-site-ssl.conf /etc/nginx/sites-available/default-ssl.conf
|
|
RUN ln -s /etc/nginx/sites-available/default.conf /etc/nginx/sites-enabled/default.conf
|
|
|
|
# tweak php-fpm config
|
|
RUN sed -i \
|
|
-e "s/;cgi.fix_pathinfo=1/cgi.fix_pathinfo=0/g" \
|
|
-e "s/upload_max_filesize\s*=\s*2M/upload_max_filesize = 100M/g" \
|
|
-e "s/post_max_size\s*=\s*8M/post_max_size = 100M/g" \
|
|
-e "s/variables_order = \"GPCS\"/variables_order = \"EGPCS\"/g" \
|
|
${php_conf} && \
|
|
sed -i \
|
|
-e "s/;daemonize\s*=\s*yes/daemonize = no/g" \
|
|
-e "s/;catch_workers_output\s*=\s*yes/catch_workers_output = yes/g" \
|
|
-e "s/pm.max_children = 4/pm.max_children = 4/g" \
|
|
-e "s/pm.start_servers = 2/pm.start_servers = 3/g" \
|
|
-e "s/pm.min_spare_servers = 1/pm.min_spare_servers = 2/g" \
|
|
-e "s/pm.max_spare_servers = 3/pm.max_spare_servers = 4/g" \
|
|
-e "s/pm.max_requests = 500/pm.max_requests = 200/g" \
|
|
-e "s/user = nobody/user = nginx/g" \
|
|
-e "s/group = nobody/group = nginx/g" \
|
|
-e "s/;listen.mode = 0660/listen.mode = 0666/g" \
|
|
-e "s/;listen.owner = nobody/listen.owner = nginx/g" \
|
|
-e "s/;listen.group = nobody/listen.group = nginx/g" \
|
|
-e "s/listen = 127.0.0.1:9000/listen = \/var\/run\/php-fpm.sock/g" \
|
|
-e "s/^;clear_env = no$/clear_env = no/" \
|
|
${fpm_conf} && \
|
|
ln -s /etc/php7/php.ini /etc/php7/conf.d/php.ini && \
|
|
find /etc/php7/conf.d/ -name "*.ini" -exec sed -i -re 's/^(\s*)#(.*)/\1;\2/g' {} \;
|
|
|
|
|
|
# Add Scripts
|
|
ADD scripts/start.sh /start.sh
|
|
ADD scripts/pull /usr/bin/pull
|
|
ADD scripts/push /usr/bin/push
|
|
ADD scripts/letsencrypt-setup /usr/bin/letsencrypt-setup
|
|
ADD scripts/letsencrypt-renew /usr/bin/letsencrypt-renew
|
|
RUN chmod 755 /usr/bin/pull && chmod 755 /usr/bin/push && chmod 755 /usr/bin/letsencrypt-setup && chmod 755 /usr/bin/letsencrypt-renew && chmod 755 /start.sh
|
|
|
|
# copy in code
|
|
ADD src/ /var/www/html/
|
|
ADD errors/ /var/www/errors
|
|
|
|
VOLUME /var/www/html
|
|
|
|
EXPOSE 443 80
|
|
|
|
#CMD ["/usr/bin/supervisord", "-n", "-c", "/etc/supervisord.conf"]
|
|
CMD ["/start.sh"]
|