Dockerfile

FROM caddy:2.11.4-builder AS caddy-builder

FROM dunglas/frankenphp:1.12.2-builder-php8.4.20 AS upstream

COPY --link --from=caddy-builder /usr/bin/xcaddy /usr/bin/xcaddy

RUN CGO_ENABLED=1 \
    XCADDY_SETCAP=1 \
    XCADDY_GO_BUILD_FLAGS="-ldflags='-w -s' -tags=nobadger,nomysql,nopgx" \
    CGO_CFLAGS=$(php-config --includes) \
    CGO_LDFLAGS="$(php-config --ldflags) $(php-config --libs)" \
    xcaddy build \
    --output /usr/local/bin/frankenphp \
    --with github.com/dunglas/frankenphp=./ \
    --with github.com/dunglas/frankenphp/caddy=./caddy/ \
    --with github.com/dunglas/caddy-cbrotli

FROM dunglas/frankenphp:1.12.2-php8.4.20 AS base

RUN apt-get update && \
    apt-get install -yqq --no-install-recommends \
    curl \
    wget \
    ca-certificates \
    procps \
    unzip \
    supervisor \
    libsodium-dev && \
    apt-get autoremove -yqq && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* /var/log/lastlog /var/log/faillog

RUN install-php-extensions \
    bcmath \
    apcu \
    bz2 \
    exif \
    gd \
    igbinary \
    intl \
    mbstring \
    opcache \
    pcntl \
    pdo_pgsql \
    pdo_mysql \
    pgsql \
    redis \
    sockets \
    vips \
    ffi \
    zip && \
    docker-php-source delete && \
    rm -rf /tmp/* /var/tmp/*

# Install dependencies
FROM composer:2.10.2 AS vendor

ENV COMPOSER_FUND=0 \
    COMPOSER_MAX_PARALLEL_HTTP=48 \
    COMPOSER_IGNORE_PLATFORM_REQS=1

WORKDIR /tmp

COPY --link composer.* ./

RUN composer install \
    --classmap-authoritative \
    --no-interaction \
    --no-ansi \
    --no-dev \
    --no-scripts \
    --prefer-dist

# Build production image
FROM base AS runner

COPY --link --from=upstream /usr/local/bin/frankenphp /usr/local/bin/frankenphp

ARG UID=1000 \
    GID=1000 \
    TZ=UTC \
    APP_ENV=production

ENV USER=octane \
    ROOT=/var/www/html \
    OCTANE_SERVER=frankenphp \
    TZ=${TZ} \
    TERM=xterm-color \
    LANG=C.UTF-8 \
    WITH_HORIZON=false \
    WITH_REVERB=false \
    WITH_SCHEDULER=false \
    APP_ENV=${APP_ENV} \
    APP_DEBUG=false \
    COMPOSER_FUND=0 \
    COMPOSER_MAX_PARALLEL_HTTP=48 \
    GODEBUG=cgocheck=0 \
    GOMEMLIMIT=512MiB

ENV XDG_CONFIG_HOME=${ROOT}/.config \
    XDG_DATA_HOME=${ROOT}/.data

WORKDIR ${ROOT}

SHELL ["/bin/sh", "-eou", "pipefail", "-c"]

RUN arch="$(uname -m)" && \
    case "$arch" in \
    armhf) _cronic_fname="supercronic-linux-arm" ;; \
    aarch64) _cronic_fname="supercronic-linux-arm64" ;; \
    x86_64) _cronic_fname="supercronic-linux-amd64" ;; \
    x86) _cronic_fname="supercronic-linux-386" ;; \
    *) echo >&2 "error: unsupported architecture: $arch"; exit 1 ;; \
    esac && \
    wget -q "https://github.com/aptible/supercronic/releases/download/v0.2.46/${_cronic_fname}" \
    -O /usr/bin/supercronic && \
    chmod +x /usr/bin/supercronic && \
    mkdir -p /etc/supercronic && \
    echo "*/1 * * * * php ${ROOT}/artisan schedule:run --no-interaction" > /etc/supercronic/laravel

RUN ln -snf /usr/share/zoneinfo/${TZ} /etc/localtime && \
    echo ${TZ} > /etc/timezone
RUN userdel --remove --force www-data 2>/dev/null || true && \
    groupadd --force -g ${GID} ${USER} && \
    useradd -ms /bin/bash --no-log-init --no-user-group -g ${GID} -u ${UID} ${USER}

RUN mkdir -p ${XDG_CONFIG_HOME} ${XDG_DATA_HOME} /var/log/supervisor /var/run/supervisor && \
    chown -R ${UID}:${GID} ${ROOT} /var/log /var/run && \
    chmod -R a+rw ${ROOT} /var/log /var/run && \
    find / -perm /6000 -type f -exec chmod a-s {} + 2>/dev/null || true

# Use the default production configuration
RUN cp ${PHP_INI_DIR}/php.ini-production ${PHP_INI_DIR}/php.ini

USER ${USER}

COPY --link --chown=${UID}:${GID} deployment/php.ini ${PHP_INI_DIR}/conf.d/99-octane.ini
COPY --link --chown=${UID}:${GID} deployment/Caddyfile ${ROOT}/deployment/Caddyfile
COPY --link --chown=${UID}:${GID} deployment/supervisord.conf /etc/
COPY --link --chown=${UID}:${GID} deployment/supervisord.*.conf /etc/supervisor/conf.d/
COPY --link --chown=${UID}:${GID} deployment/healthcheck /usr/local/bin/healthcheck
COPY --link --chown=${UID}:${GID} deployment/start-container /usr/local/bin/start-container
COPY --link --chown=${UID}:${GID} --from=vendor /usr/bin/composer /usr/bin/composer
COPY --link --chown=${UID}:${GID} --from=vendor /tmp/vendor ./vendor
COPY --link --chown=${UID}:${GID} . .

RUN composer dump-autoload \
    --optimize \
    --classmap-authoritative \
    --apcu \
    --no-dev && \
    rm -f /usr/bin/composer && \
    chmod +x /usr/local/bin/start-container /usr/local/bin/healthcheck

EXPOSE 8000 2019 8080

HEALTHCHECK --start-period=5s --interval=1s --timeout=3s --retries=10 CMD healthcheck || exit 1

ENTRYPOINT ["start-container"]