146 lines
5.6 KiB
Docker
146 lines
5.6 KiB
Docker
# =============================================================================
|
|
# Stage 1: Build
|
|
# Installs all PHP + Node dependencies and builds Vite assets.
|
|
# This stage is NOT used in production — only its outputs are copied.
|
|
# =============================================================================
|
|
FROM php:8.4-cli-bookworm AS build
|
|
|
|
# System deps for build stage
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
git \
|
|
unzip \
|
|
zip \
|
|
curl \
|
|
libzip-dev \
|
|
libfreetype6-dev \
|
|
libjpeg62-turbo-dev \
|
|
libpng-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# PHP extensions needed for composer install / post-autoload-dump
|
|
RUN docker-php-ext-configure gd --with-freetype --with-jpeg \
|
|
&& docker-php-ext-install gd zip
|
|
|
|
# Install Node.js 20 LTS via NodeSource
|
|
RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
|
|
&& apt-get install -y --no-install-recommends nodejs \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Composer
|
|
COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
|
|
|
|
WORKDIR /app
|
|
|
|
# ── PHP dependency layer (cached until composer.lock changes) ────────────────
|
|
COPY composer.json composer.lock ./
|
|
RUN composer install \
|
|
--no-dev \
|
|
--optimize-autoloader \
|
|
--no-scripts \
|
|
--no-interaction \
|
|
--prefer-dist
|
|
|
|
# ── Node dependency layer (cached until package-lock.json changes) ───────────
|
|
COPY package.json package-lock.json ./
|
|
RUN npm ci --ignore-scripts
|
|
|
|
# ── Full source + build ──────────────────────────────────────────────────────
|
|
COPY . .
|
|
|
|
# Run composer post-autoload-dump scripts (package discovery etc.)
|
|
RUN composer run-script post-autoload-dump --no-interaction || true
|
|
|
|
# Build Vite assets (outputs to public/build/)
|
|
RUN npm run build
|
|
|
|
# Copy public/ → public-build/ so the production stage retains built assets
|
|
# even after public/ becomes a runtime bind-mount target.
|
|
RUN cp -r public/ public-build/
|
|
|
|
|
|
# =============================================================================
|
|
# Stage 2: Production
|
|
# PHP-FPM runtime image with all system dependencies.
|
|
# Node.js is NOT present here.
|
|
# =============================================================================
|
|
FROM php:8.4-fpm-bookworm AS production
|
|
|
|
# System packages (excluding Node.js — not needed at runtime)
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
supervisor \
|
|
libzip-dev \
|
|
libfreetype6-dev \
|
|
libjpeg62-turbo-dev \
|
|
libpng-dev \
|
|
libsqlite3-dev \
|
|
default-mysql-client \
|
|
ghostscript \
|
|
poppler-utils \
|
|
sqlite3 \
|
|
libfcgi-bin \
|
|
unzip \
|
|
zip \
|
|
curl \
|
|
git \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# LibreOffice for PowerPoint → PDF conversion (large layer, separate cache)
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
libreoffice-impress \
|
|
libreoffice-l10n-de \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# PHP extensions
|
|
RUN docker-php-ext-configure gd --with-freetype --with-jpeg \
|
|
&& docker-php-ext-install \
|
|
gd \
|
|
pdo_sqlite \
|
|
pdo_mysql \
|
|
zip \
|
|
bcmath
|
|
|
|
# Install Composer (needed for artisan commands, not for installing packages)
|
|
COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
|
|
|
|
WORKDIR /app
|
|
|
|
# ── Copy built application from build stage ──────────────────────────────────
|
|
COPY --from=build /app /app
|
|
|
|
# Remove node_modules — not needed at runtime
|
|
RUN rm -rf /app/node_modules
|
|
|
|
# ── Install Docker config files ──────────────────────────────────────────────
|
|
# Supervisord (manages php-fpm, queue:work, schedule:work)
|
|
COPY build/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
|
|
|
|
# PHP runtime config (upload limits, error logging, timezone)
|
|
COPY build/php.ini /usr/local/etc/php/conf.d/zz-app.ini
|
|
|
|
# FPM pool config (replaces default www pool — sets ping endpoint, clear_env=no)
|
|
COPY build/fpm-pool.conf /usr/local/etc/php-fpm.d/zz-www.conf
|
|
|
|
# FPM error logging to stderr
|
|
COPY build/fpm-error-logging.conf /usr/local/etc/php-fpm.d/zz-error-logging.conf
|
|
|
|
# Remove default FPM pool config (replaced by our zz-www.conf above)
|
|
RUN rm -f /usr/local/etc/php-fpm.d/www.conf /usr/local/etc/php-fpm.d/www.conf.default
|
|
|
|
# ── Boot / Init scripts ───────────────────────────────────────────────────────
|
|
RUN chmod +x /app/build/boot-container.sh /app/build/init-app.sh
|
|
|
|
# ── Runtime setup ─────────────────────────────────────────────────────────────
|
|
EXPOSE 9000
|
|
|
|
# Healthcheck: FPM ping endpoint (starts checking after 60s to allow boot)
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
|
|
CMD SCRIPT_NAME=/ping SCRIPT_FILENAME=/ping REQUEST_METHOD=GET \
|
|
cgi-fcgi -bind -connect 127.0.0.1:9000 2>/dev/null | grep -q "pong" || exit 1
|
|
|
|
# boot-container.sh runs as root: creates dirs, sets permissions,
|
|
# creates DB on first run, runs migrations, runs cache commands,
|
|
# syncs built assets to the bind-mounted public/ directory,
|
|
# then exec's supervisord (CMD).
|
|
ENTRYPOINT ["/app/build/boot-container.sh"]
|
|
CMD ["/usr/bin/supervisord", "-n", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
|