docker-php-nginx/Dockerfile

FROM alpine:3.9
LABEL Maintainer="Tim de Pater <code@trafex.nl>" \
      Description="Lightweight container with Nginx 1.14 & PHP-FPM 7.2 based on Alpine Linux."

# Install packages
RUN apk --no-cache add php7 php7-fpm php7-mysqli php7-json php7-openssl php7-curl \
    php7-zlib php7-xml php7-phar php7-intl php7-dom php7-xmlreader php7-ctype \
    php7-mbstring php7-gd nginx supervisor curl

# Configure nginx
COPY config/nginx.conf /etc/nginx/nginx.conf

# Configure PHP-FPM
COPY config/fpm-pool.conf /etc/php7/php-fpm.d/www.conf
COPY config/php.ini /etc/php7/conf.d/zzz_custom.ini

# Configure supervisord
COPY config/supervisord.conf /etc/supervisor/conf.d/supervisord.conf

# Make sure files/folders needed by the processes are accessable when they run under the nobody user
RUN chown -R nobody.nobody /run && \
  chown -R nobody.nobody /var/lib/nginx && \
  chown -R nobody.nobody /var/tmp/nginx && \
  chown -R nobody.nobody /var/log/nginx

# Setup document root
RUN mkdir -p /var/www/html

# Switch to use a non-root user from here on
USER nobody

# Add application
WORKDIR /var/www/html
COPY --chown=nobody src/ /var/www/html/

# Expose the port nginx is reachable on
EXPOSE 8080

# Let supervisord start nginx & php-fpm
CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]

# Configure a healthcheck to validate that everything is up&running
HEALTHCHECK --timeout=10s CMD curl --silent --fail http://127.0.0.1:8080/fpm-ping
alpine 3.9 2019-02-02 16:12:37 +08:00			`FROM alpine:3.9`
Add the '--no-cache' flag to apk to avoid having local cache files. Switched to using labels in Dockerfile 2017-01-21 19:05:00 +08:00			`LABEL Maintainer="Tim de Pater <code@trafex.nl>" \`
Updated to Alpine Linux 3.8 which includes PHP 7.2 & Nginx 1.14 2018-07-24 00:01:00 +08:00			`Description="Lightweight container with Nginx 1.14 & PHP-FPM 7.2 based on Alpine Linux."`
Intial commit 2016-02-16 01:20:56 +08:00
Updated to Alpine Linux 3.6 and removed testing repo 2017-08-21 16:50:35 +08:00			`# Install packages`
Updated to PHP7.1. Improved the overall config based on the trafex/wordpress image 2017-03-28 19:58:02 +08:00			`RUN apk --no-cache add php7 php7-fpm php7-mysqli php7-json php7-openssl php7-curl \`
			`php7-zlib php7-xml php7-phar php7-intl php7-dom php7-xmlreader php7-ctype \`
Updated to Alpine Linux 3.6 and removed testing repo 2017-08-21 16:50:35 +08:00			`php7-mbstring php7-gd nginx supervisor curl`
Rewrote the example setup to have only one Docker container 2016-02-24 18:08:50 +08:00
			`# Configure nginx`
Switched to Alpine Linux for a smaller footprint 2016-03-16 20:34:24 +08:00			`COPY config/nginx.conf /etc/nginx/nginx.conf`
Rewrote the example setup to have only one Docker container 2016-02-24 18:08:50 +08:00
			`# Configure PHP-FPM`
Run the services in the container as non-privileged user 2019-01-26 20:54:53 +08:00			`COPY config/fpm-pool.conf /etc/php7/php-fpm.d/www.conf`
Switched to Alpine Linux for a smaller footprint 2016-03-16 20:34:24 +08:00			`COPY config/php.ini /etc/php7/conf.d/zzz_custom.ini`

			`# Configure supervisord`
			`COPY config/supervisord.conf /etc/supervisor/conf.d/supervisord.conf`
Rewrote the example setup to have only one Docker container 2016-02-24 18:08:50 +08:00
Run the services in the container as non-privileged user 2019-01-26 20:54:53 +08:00			`# Make sure files/folders needed by the processes are accessable when they run under the nobody user`
Fixed a permission error when Nginx tries to write the error log or to remove the pid 2019-01-27 15:08:54 +08:00			`RUN chown -R nobody.nobody /run && \`
			`chown -R nobody.nobody /var/lib/nginx && \`
Run the services in the container as non-privileged user 2019-01-26 20:54:53 +08:00			`chown -R nobody.nobody /var/tmp/nginx && \`
Fixed a permission error when Nginx tries to write the error log or to remove the pid 2019-01-27 15:08:54 +08:00			`chown -R nobody.nobody /var/log/nginx`
Run the services in the container as non-privileged user 2019-01-26 20:54:53 +08:00
			`# Setup document root`
Rewrote the example setup to have only one Docker container 2016-02-24 18:08:50 +08:00			`RUN mkdir -p /var/www/html`
Run the services in the container as non-privileged user 2019-01-26 20:54:53 +08:00
			`# Switch to use a non-root user from here on`
			`USER nobody`

			`# Add application`
Rewrote the example setup to have only one Docker container 2016-02-24 18:08:50 +08:00			`WORKDIR /var/www/html`
Run the services in the container as non-privileged user 2019-01-26 20:54:53 +08:00			`COPY --chown=nobody src/ /var/www/html/`

			`# Expose the port nginx is reachable on`
			`EXPOSE 8080`
Changed containers to have all the data included and don't mount any volumes 2016-02-16 17:13:29 +08:00
Run the services in the container as non-privileged user 2019-01-26 20:54:53 +08:00			`# Let supervisord start nginx & php-fpm`
Switched to Alpine Linux for a smaller footprint 2016-03-16 20:34:24 +08:00			`CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]`
Added HEALTHCHECK instruction to the Dockefile and enabled PHP FPM ping path 2019-01-05 16:27:58 +08:00
Run the services in the container as non-privileged user 2019-01-26 20:54:53 +08:00			`# Configure a healthcheck to validate that everything is up&running`
Fixed HEALTCHECK now Nginx is running on a different port 2019-01-27 15:01:52 +08:00			`HEALTHCHECK --timeout=10s CMD curl --silent --fail http://127.0.0.1:8080/fpm-ping`