Update Dockerfile
This commit is contained in:
@@ -1,6 +1,6 @@
|
|||||||
# Versions
|
# Versions
|
||||||
# https://hub.docker.com/r/serversideup/php/tags?name=8.3-fpm-nginx-alpine
|
# https://hub.docker.com/r/serversideup/php/tags?name=8.3-fpm-nginx-alpine
|
||||||
ARG SERVERSIDEUP_PHP_VERSION=8.2-fpm-nginx-v2.2.1
|
ARG SERVERSIDEUP_PHP_VERSION=8.3-fpm-nginx-alpine
|
||||||
# https://github.com/minio/mc/releases
|
# https://github.com/minio/mc/releases
|
||||||
ARG MINIO_VERSION=RELEASE.2024-11-05T11-29-45Z
|
ARG MINIO_VERSION=RELEASE.2024-11-05T11-29-45Z
|
||||||
# https://github.com/cloudflare/cloudflared/releases
|
# https://github.com/cloudflare/cloudflared/releases
|
||||||
@@ -8,82 +8,115 @@ ARG CLOUDFLARED_VERSION=2024.11.0
|
|||||||
# https://www.postgresql.org/support/versioning/ - Can not updated automatically so keep it at 15
|
# https://www.postgresql.org/support/versioning/ - Can not updated automatically so keep it at 15
|
||||||
ARG POSTGRES_VERSION=15
|
ARG POSTGRES_VERSION=15
|
||||||
|
|
||||||
|
# =================================================================
|
||||||
|
# Stage 1: Composer dependencies
|
||||||
|
# =================================================================
|
||||||
FROM serversideup/php:${SERVERSIDEUP_PHP_VERSION} AS base
|
FROM serversideup/php:${SERVERSIDEUP_PHP_VERSION} AS base
|
||||||
WORKDIR /var/www/html
|
|
||||||
|
|
||||||
COPY composer.json composer.lock ./
|
WORKDIR /var/www/html
|
||||||
|
COPY --chown=www-data:www-data composer.json composer.lock ./
|
||||||
RUN composer install --no-dev --no-interaction --no-plugins --no-scripts --prefer-dist
|
RUN composer install --no-dev --no-interaction --no-plugins --no-scripts --prefer-dist
|
||||||
|
|
||||||
FROM node:20 AS static-assets
|
# =================================================================
|
||||||
WORKDIR /app
|
# Stage 2: Frontend assets compilation
|
||||||
COPY . .
|
# =================================================================
|
||||||
COPY --from=base --chown=9999:9999 /var/www/html .
|
FROM node:20-alpine AS static-assets
|
||||||
RUN npm install
|
|
||||||
RUN npm run build
|
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
COPY package*.json vite.config.js tailwind.config.js postcss.config.cjs ./
|
||||||
|
COPY public ./public
|
||||||
|
COPY resources ./resources
|
||||||
|
RUN npm ci && npm run build
|
||||||
|
|
||||||
|
# =================================================================
|
||||||
|
# Stage 3: Get MinIO client
|
||||||
|
# =================================================================
|
||||||
FROM minio/mc:${MINIO_VERSION} AS minio-client
|
FROM minio/mc:${MINIO_VERSION} AS minio-client
|
||||||
|
|
||||||
|
# =================================================================
|
||||||
|
# Final Stage: Production image
|
||||||
|
# =================================================================
|
||||||
FROM serversideup/php:${SERVERSIDEUP_PHP_VERSION}
|
FROM serversideup/php:${SERVERSIDEUP_PHP_VERSION}
|
||||||
|
|
||||||
ARG TARGETPLATFORM
|
ARG TARGETPLATFORM
|
||||||
ARG CLOUDFLARED_VERSION
|
|
||||||
ARG POSTGRES_VERSION
|
ARG POSTGRES_VERSION
|
||||||
|
ARG CLOUDFLARED_VERSION
|
||||||
ARG CI=true
|
ARG CI=true
|
||||||
|
|
||||||
WORKDIR /var/www/html
|
WORKDIR /var/www/html
|
||||||
|
|
||||||
RUN apt-get update
|
USER root
|
||||||
# Postgres version requirements
|
|
||||||
RUN apt install dirmngr ca-certificates software-properties-common gnupg gnupg2 apt-transport-https curl -y
|
|
||||||
RUN curl -fSsL https://www.postgresql.org/media/keys/ACCC4CF8.asc | gpg --dearmor | tee /usr/share/keyrings/postgresql.gpg > /dev/null
|
|
||||||
|
|
||||||
RUN echo deb [arch=amd64,arm64,ppc64el signed-by=/usr/share/keyrings/postgresql.gpg] http://apt.postgresql.org/pub/repos/apt/ jammy-pgdg main | tee -a /etc/apt/sources.list.d/postgresql.list
|
# Install PostgreSQL repository and keys
|
||||||
|
RUN apk add --no-cache gnupg && \
|
||||||
|
mkdir -p /usr/share/keyrings && \
|
||||||
|
curl -fSsL https://www.postgresql.org/media/keys/ACCC4CF8.asc | gpg --dearmor > /usr/share/keyrings/postgresql.gpg
|
||||||
|
|
||||||
RUN apt-get update
|
# Install system dependencies
|
||||||
RUN apt-get install postgresql-client-${POSTGRES_VERSION} -y
|
RUN apk add --no-cache \
|
||||||
|
postgresql${POSTGRES_VERSION}-client \
|
||||||
|
openssh-client \
|
||||||
|
git \
|
||||||
|
git-lfs \
|
||||||
|
jq \
|
||||||
|
lsof
|
||||||
|
|
||||||
# Coolify requirements
|
# Configure shell aliases
|
||||||
RUN apt-get install -y php8.2-pgsql openssh-client git git-lfs jq lsof vim
|
RUN echo "alias ll='ls -al'" >> /etc/profile && \
|
||||||
RUN apt-get -y autoremove && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* /usr/share/doc/*
|
echo "alias a='php artisan'" >> /etc/profile && \
|
||||||
|
echo "alias logs='tail -f storage/logs/laravel.log'" >> /etc/profile
|
||||||
|
|
||||||
|
# Install Cloudflared based on architecture
|
||||||
|
RUN mkdir -p /usr/local/bin && \
|
||||||
|
if [ "${TARGETPLATFORM}" = "linux/amd64" ]; then \
|
||||||
|
curl -sSL "https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-amd64" -o /usr/local/bin/cloudflared; \
|
||||||
|
elif [ "${TARGETPLATFORM}" = "linux/arm64" ]; then \
|
||||||
|
curl -sSL "https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-arm64" -o /usr/local/bin/cloudflared; \
|
||||||
|
fi && \
|
||||||
|
chmod +x /usr/local/bin/cloudflared
|
||||||
|
|
||||||
|
# Configure PHP
|
||||||
|
RUN echo 'upload_max_filesize=256M' > /usr/local/etc/php/conf.d/upload-limits.ini && \
|
||||||
|
echo 'post_max_size=256M' >> /usr/local/etc/php/conf.d/upload-limits.ini
|
||||||
|
ENV PHP_OPCACHE_ENABLE=1
|
||||||
|
|
||||||
|
# Copy application files from previous stages
|
||||||
|
COPY --from=base --chown=www-data:www-data /var/www/html/vendor ./vendor
|
||||||
|
COPY --from=static-assets --chown=www-data:www-data /app/public/build ./public/build
|
||||||
|
|
||||||
|
# Copy application source code
|
||||||
|
COPY --chown=www-data:www-data composer.json composer.lock ./
|
||||||
|
COPY --chown=www-data:www-data app ./app
|
||||||
|
COPY --chown=www-data:www-data bootstrap ./bootstrap
|
||||||
|
COPY --chown=www-data:www-data config ./config
|
||||||
|
COPY --chown=www-data:www-data database ./database
|
||||||
|
COPY --chown=www-data:www-data lang ./lang
|
||||||
|
COPY --chown=www-data:www-data public ./public
|
||||||
|
COPY --chown=www-data:www-data routes ./routes
|
||||||
|
COPY --chown=www-data:www-data storage ./storage
|
||||||
|
COPY --chown=www-data:www-data templates ./templates
|
||||||
|
COPY --chown=www-data:www-data artisan artisan
|
||||||
|
|
||||||
|
# Configure Nginx and S6 overlay
|
||||||
COPY docker/prod/nginx.conf /etc/nginx/conf.d/custom.conf
|
COPY docker/prod/nginx.conf /etc/nginx/conf.d/custom.conf
|
||||||
|
|
||||||
COPY --from=base --chown=9999:9999 /var/www/html .
|
|
||||||
|
|
||||||
COPY --chown=9999:9999 . .
|
|
||||||
RUN composer dump-autoload
|
|
||||||
|
|
||||||
COPY --from=static-assets --chown=9999:9999 /app/public/build ./public/build
|
|
||||||
COPY --chmod=755 docker/prod/etc/s6-overlay/ /etc/s6-overlay/
|
COPY --chmod=755 docker/prod/etc/s6-overlay/ /etc/s6-overlay/
|
||||||
|
|
||||||
RUN php artisan route:clear
|
RUN mkdir -p /etc/nginx/conf.d && \
|
||||||
RUN php artisan view:clear
|
chown -R www-data:www-data /etc/nginx && \
|
||||||
RUN php artisan config:clear
|
chmod -R 755 /etc/nginx
|
||||||
RUN php artisan route:cache
|
|
||||||
RUN php artisan view:cache
|
|
||||||
RUN php artisan config:cache
|
|
||||||
|
|
||||||
RUN echo "alias ll='ls -al'" >>/etc/bash.bashrc
|
|
||||||
RUN echo "alias a='php artisan'" >>/etc/bash.bashrc
|
|
||||||
RUN echo "alias logs='tail -f storage/logs/laravel.log'" >>/etc/bash.bashrc
|
|
||||||
|
|
||||||
RUN mkdir -p /usr/local/bin
|
|
||||||
|
|
||||||
RUN /bin/bash -c "if [[ ${TARGETPLATFORM} == 'linux/amd64' ]]; then \
|
|
||||||
echo 'amd64' && \
|
|
||||||
curl -sSL https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-amd64 -o /usr/local/bin/cloudflared && chmod +x /usr/local/bin/cloudflared \
|
|
||||||
;fi"
|
|
||||||
|
|
||||||
RUN /bin/bash -c "if [[ ${TARGETPLATFORM} == 'linux/arm64' ]]; then \
|
|
||||||
echo 'arm64' && \
|
|
||||||
curl -L https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-arm64 -o /usr/local/bin/cloudflared && chmod +x /usr/local/bin/cloudflared \
|
|
||||||
;fi"
|
|
||||||
|
|
||||||
RUN { \
|
|
||||||
echo 'upload_max_filesize=256M'; \
|
|
||||||
echo 'post_max_size=256M'; \
|
|
||||||
} > /etc/php/current_version/cli/conf.d/upload-limits.ini
|
|
||||||
|
|
||||||
|
# Install MinIO client
|
||||||
COPY --from=minio-client /usr/bin/mc /usr/bin/mc
|
COPY --from=minio-client /usr/bin/mc /usr/bin/mc
|
||||||
RUN chmod +x /usr/bin/mc
|
RUN chmod +x /usr/bin/mc
|
||||||
|
|
||||||
|
# Switch to non-root user
|
||||||
|
USER www-data
|
||||||
|
|
||||||
|
# Optimize Laravel application
|
||||||
|
RUN composer dump-autoload && \
|
||||||
|
php artisan route:clear && \
|
||||||
|
php artisan view:clear && \
|
||||||
|
php artisan config:clear && \
|
||||||
|
php artisan route:cache && \
|
||||||
|
php artisan view:cache && \
|
||||||
|
php artisan config:cache
|
||||||
|
Reference in New Issue
Block a user