Dockerfile.tpl

FROM php:%%PHP_VERSION%%-apache-%%OS_VERSION%%
LABEL maintainer="docker@ipeos.com"
LABEL authors="Laurent Vergerolle <docker@ipeos.com>, Michael Nival <docker@mn-home.fr>"

RUN set -eux; \
	apt-get update; \
	apt-get install -y --no-install-recommends \
	ghostscript \
	netcat-traditional \
	; \
	rm -rf /var/lib/apt/lists/*;

RUN set -eux; \
	\
	savedAptMark="$(apt-mark showmanual)"; \
	\
	apt-get update; \
	apt-get install -y --no-install-recommends \
	libxml2-dev \
	libssl-dev \
	libavif-dev \
	libfreetype6-dev \
	libjpeg-dev \
	libjpeg62-turbo-dev \
	libpng-dev \
	libzip-dev \
	sqlite3 \
	libsqlite3-dev \
	zlib1g-dev \
	libsodium-dev \
	netpbm \
	imagemagick \
	libldap2-dev \
	libicu-dev \
	libmagickwand-dev \
	libwebp-dev; \
	\
	docker-php-ext-configure gd --with-avif --with-freetype --with-jpeg --with-webp; \
	\
	docker-php-ext-install -j$(nproc) \
	gd \
	xml \
	exif \
	bcmath \
	mysqli \
	pdo \
	pdo_sqlite \
	sodium \
	zip \
	phar \
	opcache; \
	\
	docker-php-ext-configure ldap --with-libdir=lib/x86_64-linux-gnu/ && \
	docker-php-ext-install ldap; \
	\
	curl -fL -o imagick.tgz 'https://pecl.php.net/get/imagick-3.7.0.tgz'; \
	echo '5a364354109029d224bcbb2e82e15b248be9b641227f45e63425c06531792d3e *imagick.tgz' | sha256sum -c -; \
	tar --extract --directory /tmp --file imagick.tgz imagick-3.7.0; \
	grep '^//#endif$' /tmp/imagick-3.7.0/Imagick.stub.php; \
	test "$(grep -c '^//#endif$' /tmp/imagick-3.7.0/Imagick.stub.php)" = '1'; \
	sed -i -e 's!^//#endif$!#endif!' /tmp/imagick-3.7.0/Imagick.stub.php; \
	grep '^//#endif$' /tmp/imagick-3.7.0/Imagick.stub.php && exit 1 || :; \
	docker-php-ext-install /tmp/imagick-3.7.0; \
	rm -rf imagick.tgz /tmp/imagick-3.7.0; \
	\
	pecl install apcu && \
	docker-php-ext-enable apcu; \
	out="$(php -r 'exit(0);')"; \
	[ -z "$out" ]; \
	err="$(php -r 'exit(0);' 3>&1 1>&2 2>&3)"; \
	[ -z "$err" ]; \
	\
	extDir="$(php -r 'echo ini_get("extension_dir");')"; \
	[ -d "$extDir" ]; \
	# reset apt-mark's "manual" list so that "purge --auto-remove" will remove all build dependencies
	apt-mark auto '.*' > /dev/null; \
	apt-mark manual netpbm imagemagick $savedAptMark; \
	ldd "$extDir"/*.so \
	| awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' \
	| sort -u \
	| xargs -r dpkg-query --search \
	| cut -d: -f1 \
	| sort -u \
	| xargs -rt apt-mark manual; \
	\
	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
	rm -rf /var/lib/apt/lists/*; \
	\
	! { ldd "$extDir"/*.so | grep 'not found'; }; \
	# check for output like "PHP Warning:  PHP Startup: Unable to load dynamic library 'foo' (tried: ...)
	err="$(php --version 3>&1 1>&2 2>&3)"; \
	[ -z "$err" ]

# set recommended PHP.ini settings
# see https://secure.php.net/manual/en/opcache.installation.php
RUN { \
	echo 'opcache.enable_cli=1'; \
	echo 'opcache.memory_consumption=128'; \
	echo 'opcache.interned_strings_buffer=8'; \
	echo 'opcache.max_accelerated_files=10000'; \
	echo 'opcache.revalidate_freq=2'; \
	echo 'opcache.validate_timestamps=1'; \
	echo 'opcache.dups_fix=0'; \
	echo 'opcache.fast_shutdown=1'; \
	} > /usr/local/etc/php/conf.d/opcache-recommended.ini

RUN { \
	# https://www.php.net/manual/en/errorfunc.constants.php
	echo 'error_reporting = E_ERROR | E_WARNING | E_PARSE | E_CORE_ERROR | E_CORE_WARNING | E_COMPILE_ERROR | E_COMPILE_WARNING | E_RECOVERABLE_ERROR'; \
	echo 'display_errors = Off'; \
	echo 'display_startup_errors = Off'; \
	echo 'log_errors = On'; \
	echo 'error_log = /dev/stderr'; \
	echo 'log_errors_max_len = 1024'; \
	echo 'ignore_repeated_errors = On'; \
	echo 'ignore_repeated_source = Off'; \
	echo 'html_errors = Off'; \
	} > /usr/local/etc/php/conf.d/error-logging.ini

RUN set -eux; \
	a2enmod rewrite expires headers; \
	{ \
	echo 'ServerSignature Off'; \
	echo 'ServerTokens Prod'; \
	echo 'Header unset Composed-By'; \
	echo 'Header unset X-Powered-By'; \
	} > /etc/apache2/conf-enabled/spip_headers.conf; \
	# https://httpd.apache.org/docs/2.4/mod/mod_remoteip.html
	a2enmod remoteip; \
	{ \
	echo 'RemoteIPHeader X-Forwarded-For'; \
	# these IP ranges are reserved for "private" use and should thus *usually* be safe inside Docker
	echo 'RemoteIPInternalProxy 10.0.0.0/8'; \
	echo 'RemoteIPInternalProxy 172.16.0.0/12'; \
	echo 'RemoteIPInternalProxy 192.168.0.0/16'; \
	echo 'RemoteIPInternalProxy 169.254.0.0/16'; \
	echo 'RemoteIPInternalProxy 127.0.0.0/8'; \
	} > /etc/apache2/conf-available/remoteip.conf; \
	a2enconf remoteip; \
	# (replace all instances of "%h" with "%a" in LogFormat)
	find /etc/apache2 -type f -name '*.conf' -exec sed -ri 's/([[:space:]]*LogFormat[[:space:]]+"[^"]*)%h([^"]*")/\1%a\2/g' '{}' +

ENV SPIP_VERSION %%SPIP_VERSION%%
ENV SPIP_PACKAGE %%SPIP_PACKAGE%%

# Install SPIP-Cli
RUN set -eux; \
	cd /opt; \
	curl --silent --show-error https://getcomposer.org/installer | php; \
	fetchDeps=" \
	git \
	unzip \
	"; \
	apt-get update; \
	apt-get install -y --no-install-recommends $fetchDeps; \
	\
	git clone https://git.spip.net/spip-contrib-outils/spip-cli.git /opt/spip-cli; \
	rm -rf /opt/spip-cli/.git; \
	rm -rf /opt/spip-cli/.gitattributes; \
	rm -rf /opt/spip-cli/.gitignore; \
	ln -s /opt/spip-cli/bin/spip /usr/local/bin/spip; \
	ln -s /opt/spip-cli/bin/spipmu /usr/local/bin/spipmu; \
	cd /opt/spip-cli && /opt/composer.phar install; \
	\
	curl -o spip.zip -fSL "files.spip.net/spip/archives/spip-v${SPIP_PACKAGE}.zip"; \
	unzip spip.zip -d /usr/src/spip; \
	rm spip.zip; \
	chown -R www-data:www-data /usr/src/spip; \
	\
	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false $fetchDeps; \
	rm -rf /tmp/*; \
	rm -rf /var/lib/apt/lists/*

VOLUME /var/www/html

# SPIP
ENV SPIP_AUTO_INSTALL 1
ENV SPIP_DB_SERVER mysql
ENV SPIP_DB_HOST mysql
ENV SPIP_DB_LOGIN spip
ENV SPIP_DB_PASS spip
ENV SPIP_DB_NAME spip
ENV SPIP_DB_PREFIX spip
ENV SPIP_ADMIN_NAME Admin
ENV SPIP_ADMIN_LOGIN admin
ENV SPIP_ADMIN_EMAIL admin@spip
ENV SPIP_ADMIN_PASS adminadmin
ENV SPIP_SITE_ADDRESS http://localhost

# PHP
ENV PHP_MAX_EXECUTION_TIME 60
ENV PHP_MEMORY_LIMIT 256M
ENV PHP_POST_MAX_SIZE 40M
ENV PHP_UPLOAD_MAX_FILESIZE 32M
ENV PHP_TIMEZONE America/Guadeloupe

EXPOSE 80

COPY ./docker-entrypoint.sh /

RUN chmod +x /docker-entrypoint.sh

ENTRYPOINT ["/docker-entrypoint.sh"]

CMD ["apache2-foreground"]

# Healthcheck
HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=7 \
	CMD curl -f http://localhost/ecrire/ || exit 1