forked from fa/breadcrumb-the-shire
0e70e50abf
- Add .gitea/workflows/deploy.yaml: QA → build prod image → SCP to server → docker load + compose up + module:sync - Fix Dockerfile prod stage: copy module web assets directly from modules/*/web/ instead of resolving symlinks (symlinks are excluded via .dockerignore and break on Windows/CI) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
78 lines
2.7 KiB
Docker
78 lines
2.7 KiB
Docker
FROM php:8.5-fpm AS base
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
git \
|
|
unzip \
|
|
libzip-dev \
|
|
libmemcached-dev \
|
|
zlib1g-dev \
|
|
libssl-dev \
|
|
libjpeg-dev \
|
|
libpng-dev \
|
|
libwebp-dev \
|
|
libldap2-dev \
|
|
&& pecl install memcached \
|
|
&& docker-php-ext-enable memcached \
|
|
&& docker-php-ext-configure gd --with-jpeg --with-webp \
|
|
&& docker-php-ext-install pdo_mysql mysqli gd zip ldap \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
|
|
|
|
WORKDIR /var/www
|
|
|
|
# ── Development profile (default) ────────────────────────────────────
|
|
FROM base AS dev
|
|
|
|
RUN pecl install xdebug \
|
|
&& docker-php-ext-enable xdebug
|
|
|
|
COPY docker/php/php.ini /usr/local/etc/php/conf.d/zzz-minty-dev.ini
|
|
COPY docker/php/xdebug.ini /usr/local/etc/php/conf.d/zzz-xdebug.ini
|
|
|
|
# ── Production profile ───────────────────────────────────────────────
|
|
# No xdebug — smaller image, no debug overhead or attack surface.
|
|
FROM base AS prod
|
|
|
|
# Copy entire project into image
|
|
COPY . /var/www
|
|
|
|
# Install composer dependencies (no dev dependencies for production).
|
|
# NOTE: php.prod.ini (with open_basedir + disable_functions) is copied AFTER
|
|
# this step — composer needs unrestricted access to its own phar at /usr/bin/.
|
|
RUN composer install \
|
|
--no-dev \
|
|
--no-interaction \
|
|
--optimize-autoloader \
|
|
&& rm -rf /root/.composer/cache
|
|
|
|
# Apply production PHP hardening AFTER composer is done.
|
|
COPY docker/php/php.prod.ini /usr/local/etc/php/conf.d/zzz-minty-prod.ini
|
|
|
|
# Publish module web assets as real files so web_init cp works correctly.
|
|
# web/modules/ is excluded via .dockerignore (absolute symlinks break on Windows/CI),
|
|
# so we copy directly from modules/<id>/web/ instead of resolving symlinks.
|
|
RUN mkdir -p /var/www/web/modules && \
|
|
for mod_web in /var/www/modules/*/web; do \
|
|
id=$(basename "$(dirname "$mod_web")"); \
|
|
if [ -d "$mod_web" ]; then \
|
|
cp -r "$mod_web" "/var/www/web/modules/$id"; \
|
|
fi; \
|
|
done
|
|
|
|
# Create runtime directories (storage/ and var/ are excluded via .dockerignore;
|
|
# they will be mounted as volumes in production — we just ensure the paths exist).
|
|
RUN mkdir -p \
|
|
/var/www/storage/logs \
|
|
/var/www/storage/runtime \
|
|
/var/www/storage/users \
|
|
/var/www/var/cache \
|
|
/var/www/var/log \
|
|
/var/www/var/tmp \
|
|
&& chown -R www-data:www-data \
|
|
/var/www/storage \
|
|
/var/www/var
|
|
|
|
# Expose port for PHP-FPM
|
|
EXPOSE 9000 |