93 lines
2.6 KiB
Docker
93 lines
2.6 KiB
Docker
# Use the official PHP 8.4 FPM image
|
|
FROM php:8.4-fpm
|
|
|
|
ARG SENTRY_RELEASE
|
|
|
|
# Install system dependencies
|
|
RUN apt-get update && apt-get install -y \
|
|
git \
|
|
curl \
|
|
libpng-dev \
|
|
libonig-dev \
|
|
libxml2-dev \
|
|
libzip-dev \
|
|
libicu-dev \
|
|
zip \
|
|
unzip \
|
|
nginx \
|
|
supervisor \
|
|
libmemcached-dev \
|
|
zlib1g-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install PHP extensions
|
|
RUN docker-php-ext-install pdo_mysql mbstring exif pcntl bcmath gd zip intl
|
|
RUN pecl install memcached redis \
|
|
&& docker-php-ext-enable memcached redis
|
|
|
|
# Install Composer
|
|
COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
|
|
|
|
# Install Node.js
|
|
RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
|
|
&& apt-get install -y nodejs
|
|
|
|
# Install Bun in a non-root path so supervisor workers running as www-data can execute it
|
|
ENV BUN_INSTALL="/usr/local/bun"
|
|
RUN curl -fsSL https://bun.com/install | bash \
|
|
&& ln -sf /usr/local/bun/bin/bun /usr/local/bin/bun \
|
|
&& chmod -R a+rx /usr/local/bun
|
|
ENV PATH="/usr/local/bun/bin:${PATH}"
|
|
|
|
# Install memcached and redis servers
|
|
RUN apt-get update && apt-get install -y memcached redis-server && rm -rf /var/lib/apt/lists/*
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
ENV SENTRY_RELEASE=${SENTRY_RELEASE}
|
|
|
|
# Copy dependency manifests first so Docker can reuse install layers across code changes
|
|
COPY composer.json composer.lock ./
|
|
RUN composer install --no-dev --no-scripts --no-interaction --prefer-dist --optimize-autoloader
|
|
|
|
COPY package.json bun.lock ./
|
|
COPY scripts ./scripts
|
|
RUN bun install --frozen-lockfile
|
|
|
|
# Copy application files
|
|
COPY . /app/.
|
|
RUN composer dump-autoload --no-dev --optimize
|
|
|
|
# Create necessary directories
|
|
RUN mkdir -p /var/log/nginx && mkdir -p /var/cache/nginx
|
|
|
|
# Build assets with HIDE_AUTH_BUTTONS=false so Wayfinder generates all routes
|
|
# (HIDE_AUTH_BUTTONS will be set to true at runtime via .env)
|
|
RUN HIDE_AUTH_BUTTONS=false bun run build:ssr
|
|
|
|
# Copy supervisor configuration
|
|
COPY docker/supervisor/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
|
|
|
|
# Copy nginx configuration
|
|
COPY docker/nginx/nginx.conf /etc/nginx/nginx.conf
|
|
|
|
# Set permissions
|
|
RUN chown -R www-data:www-data /app \
|
|
&& chmod -R 755 /app/storage \
|
|
&& chmod -R 755 /app/bootstrap/cache
|
|
|
|
# Expose port
|
|
EXPOSE 80
|
|
|
|
# Health check
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
|
|
CMD curl -f http://localhost/up || exit 1
|
|
|
|
# Copy entrypoint script
|
|
COPY docker/entrypoint.sh /entrypoint.sh
|
|
RUN chmod +x /entrypoint.sh
|
|
|
|
# Run entrypoint script (handles migrations, caching, then starts supervisor)
|
|
CMD ["/entrypoint.sh"]
|