Docker base images for PHP-FPM
This commit is contained in:
ChiefSoft works
@@ -0,0 +1,2 @@
|
||||
_OLD/
|
||||
.vscode
|
||||
@@ -0,0 +1,168 @@
|
||||
FROM php:5.6-fpm
|
||||
|
||||
MAINTAINER Mark Hilton <nerd305@gmail.com>
|
||||
|
||||
# Install PHP extensions
|
||||
RUN DEBIAN_FRONTEND=noninteractive apt-get update -q && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install -y \
|
||||
nano openssl libldb-dev libtidy-dev libgmp-dev unixODBC-dev \
|
||||
libicu-dev \
|
||||
libmcrypt-dev \
|
||||
libcurl4-openssl-dev \
|
||||
librabbitmq-dev \
|
||||
libsodium-dev \
|
||||
libpq-dev \
|
||||
libxslt1-dev \
|
||||
libfreetype6-dev \
|
||||
libjpeg62-turbo-dev \
|
||||
libpng12-dev \
|
||||
zlib1g-dev \
|
||||
libgmp3-dev \
|
||||
libbz2-dev \
|
||||
libgmp-dev \
|
||||
libgmp3-dev
|
||||
|
||||
# imagic
|
||||
RUN apt-get install -y libmagickwand-6.q16-dev --no-install-recommends \
|
||||
&& ln -s /usr/lib/x86_64-linux-gnu/ImageMagick-6.8.9/bin-Q16/MagickWand-config /usr/bin \
|
||||
&& pecl install imagick \
|
||||
&& echo "extension=imagick.so" > /usr/local/etc/php/conf.d/ext-imagick.ini
|
||||
|
||||
RUN docker-php-ext-configure xsl \
|
||||
&& docker-php-ext-configure soap --enable-soap \
|
||||
&& docker-php-ext-configure intl --enable-intl \
|
||||
&& docker-php-ext-configure pcntl --enable-pcntl \
|
||||
&& docker-php-ext-configure bcmath --enable-bcmath \
|
||||
&& docker-php-ext-configure pdo_mysql --with-pdo-mysql \
|
||||
&& docker-php-ext-configure mbstring --enable-mbstring \
|
||||
&& docker-php-ext-configure gd --with-freetype-dir=/usr/include/ --with-jpeg-dir=/usr/include/ \
|
||||
&& docker-php-ext-install gd \
|
||||
&& docker-php-ext-install dba ftp calendar ctype dom tokenizer fileinfo gettext posix tidy wddx \
|
||||
&& docker-php-ext-install exif sockets bz2 zip iconv mcrypt json session \
|
||||
&& docker-php-ext-install opcache xsl xml xmlreader xmlwriter xmlrpc simplexml \
|
||||
&& docker-php-ext-install curl bcmath intl pcntl mbstring soap mysqli pdo pdo_mysql \
|
||||
&& ln -s /usr/include/x86_64-linux-gnu/gmp.h /usr/include/gmp.h \
|
||||
&& docker-php-ext-install gmp sysvmsg sysvsem sysvshm \
|
||||
&& docker-php-ext-enable soap
|
||||
|
||||
# && docker-php-ext-configure odbc --with-unixODBC=unixODBC,/usr/ \
|
||||
# && docker-php-ext-configure pdo_odbc --with-pdo-odbc=unixODBC,/usr/ \
|
||||
# && docker-php-ext-install odbc pdo_odbc \
|
||||
# && docker-php-ext-enable odbc \
|
||||
|
||||
# mhash
|
||||
RUN apt-get install -y libmhash2 libmhash-dev php5-mhash && \
|
||||
cd /usr/src/ && \
|
||||
curl -O -L https://downloads.sourceforge.net/project/mhash/mhash/0.9.9.9/mhash-0.9.9.9.tar.gz && \
|
||||
tar xzf mhash-0.9.9.9.tar.gz && \
|
||||
cd mhash-0.9.9.9 && \
|
||||
./configure && make && make install && \
|
||||
ln -s /usr/local/lib/libmhash.so.2 /usr/lib/libmhash.so.2
|
||||
|
||||
RUN docker-php-ext-configure hash --with-mhash=/usr/src/mhash-0.9.9.9/include/ && \
|
||||
docker-php-ext-install hash
|
||||
|
||||
# Igbinary module
|
||||
RUN pecl install igbinary \
|
||||
&& docker-php-ext-enable igbinary
|
||||
|
||||
RUN pecl install -o -f redis && \
|
||||
docker-php-ext-enable redis
|
||||
|
||||
RUN pecl install apcu-4.0.10 && \
|
||||
docker-php-ext-enable apcu
|
||||
|
||||
RUN apt-get install -y libmemcached-dev \
|
||||
&& pecl install memcache \
|
||||
&& pecl install memcached-2.2.0 \
|
||||
&& docker-php-ext-enable memcache memcached
|
||||
|
||||
RUN curl -fsSL 'https://xcache.lighttpd.net/pub/Releases/3.2.0/xcache-3.2.0.tar.gz' -o xcache.tar.gz \
|
||||
&& mkdir -p xcache \
|
||||
&& tar -xf xcache.tar.gz -C xcache --strip-components=1 \
|
||||
&& rm xcache.tar.gz \
|
||||
&& ( \
|
||||
cd xcache \
|
||||
&& phpize \
|
||||
&& ./configure --enable-xcache \
|
||||
&& make -j$(nproc) \
|
||||
&& make install \
|
||||
) \
|
||||
&& rm -r xcache \
|
||||
&& docker-php-ext-enable xcache
|
||||
|
||||
# composer
|
||||
RUN RUN curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/bin/ --filename=composer
|
||||
|
||||
# install NewRelic agent
|
||||
RUN echo 'deb http://apt.newrelic.com/debian/ newrelic non-free' | tee /etc/apt/sources.list.d/newrelic.list && \
|
||||
curl https://download.newrelic.com/548C16BF.gpg | apt-key add - && \
|
||||
apt-get -y update && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get -y install newrelic-php5 newrelic-sysmond && \
|
||||
export NR_INSTALL_SILENT=1 && newrelic-install install
|
||||
|
||||
# Install required libraries
|
||||
RUN apt-get -y install libfcgi0ldbl git mysql-client cron redis-tools
|
||||
|
||||
# install sendgrid mail routing
|
||||
RUN echo "postfix postfix/mailname string localhost" | debconf-set-selections && \
|
||||
echo "postfix postfix/main_mailer_type string 'Internet Site'" | debconf-set-selections && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install postfix libsasl2-modules -y
|
||||
|
||||
# install modman
|
||||
RUN curl -s -L https://raw.github.com/colinmollenhour/modman/master/modman-installer | bash && \
|
||||
mv ~/bin/modman /usr/sbin/
|
||||
|
||||
# install composer
|
||||
ENV COMPOSER_HOME /tmp
|
||||
ENV COMPOSER_VERSION 1.5.2
|
||||
ENV COMPOSER_ALLOW_SUPERUSER 1
|
||||
|
||||
RUN curl -s -f -L -o /tmp/installer.php https://raw.githubusercontent.com/composer/getcomposer.org/da290238de6d63faace0343efbdd5aa9354332c5/web/installer \
|
||||
&& php -r " \
|
||||
\$signature = '669656bab3166a7aff8a7506b8cb2d1c292f042046c5a994c43155c0be6190fa0355160742ab2e1c88d40d5be660b410'; \
|
||||
\$hash = hash('SHA384', file_get_contents('/tmp/installer.php')); \
|
||||
if (!hash_equals(\$signature, \$hash)) { \
|
||||
unlink('/tmp/installer.php'); \
|
||||
echo 'Integrity check failed, installer is either corrupt or worse.' . PHP_EOL; \
|
||||
exit(1); \
|
||||
}" \
|
||||
&& php /tmp/installer.php --no-ansi --install-dir=/usr/bin --filename=composer --version=${COMPOSER_VERSION} \
|
||||
&& composer --ansi --version --no-interaction \
|
||||
&& rm -rf /tmp/* /tmp/.htaccess
|
||||
|
||||
# install recommended redis extension
|
||||
RUN cd /usr/src && \
|
||||
git clone https://github.com/phpredis/phpredis.git && \
|
||||
cd /usr/src/phpredis && phpize && \
|
||||
./configure --enable-redis-igbinary && \
|
||||
make && make install
|
||||
|
||||
# install blackfire.io profiler
|
||||
RUN version=$(php -r "echo PHP_MAJOR_VERSION.PHP_MINOR_VERSION;") \
|
||||
&& curl -A "Docker" -o /tmp/blackfire-probe.tar.gz -D - -L -s https://blackfire.io/api/v1/releases/probe/php/linux/amd64/$version \
|
||||
&& tar zxpf /tmp/blackfire-probe.tar.gz -C /tmp \
|
||||
&& mv /tmp/blackfire-*.so $(php -r "echo ini_get('extension_dir');")/blackfire.so \
|
||||
&& printf "extension=blackfire.so\nblackfire.agent_socket=tcp://blackfire:8707\n" > $PHP_INI_DIR/conf.d/blackfire.ini
|
||||
|
||||
# cache
|
||||
RUN echo 5
|
||||
|
||||
# Install shared PHP code
|
||||
RUN git clone https://github.com/nrk/predis.git /usr/local/lib/php/predis && \
|
||||
git clone -b magento https://github.com/markhilton/redis-http-cache.git /usr/local/lib/php/redis-http-cache
|
||||
|
||||
# clean up
|
||||
RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
||||
|
||||
COPY scripts/* /usr/local/bin/
|
||||
|
||||
RUN chmod +x /usr/local/bin/*
|
||||
|
||||
# Health check
|
||||
RUN sed -i '/pm.status_path/c\pm.status_path = /status' /usr/local/etc/php-fpm.d/www.conf && \
|
||||
sed -i '/ping.path/c\ping.path = /health' /usr/local/etc/php-fpm.d/www.conf && \
|
||||
sed -i '/ping.response/c\;ping.response = OK' /usr/local/etc/php-fpm.d/www.conf
|
||||
|
||||
HEALTHCHECK --interval=10s --timeout=5s \
|
||||
CMD SCRIPT_NAME=/health SCRIPT_FILENAME=/health REQUEST_METHOD=GET cgi-fcgi -bind -connect 127.0.0.1:9000 || exit 1
|
||||
Executable
+15
@@ -0,0 +1,15 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! "$PHP_CRONTABS_PATH" == "" ]; then
|
||||
printf "env CRONTABS_PATH: setting up crontabs: ";
|
||||
for f in ${PHP_CRONTABS_PATH}; do
|
||||
printf "$f, ";
|
||||
rm -f /etc/cron.d/${f##*/}
|
||||
cp $f /etc/cron.d/
|
||||
chmod 0644 /etc/cron.d/${f##*/}
|
||||
done
|
||||
echo
|
||||
touch /var/log/cron.log
|
||||
printenv | grep -v "no_proxy" >> /etc/environment
|
||||
/etc/init.d/cron start > /dev/null
|
||||
fi
|
||||
Executable
+56
@@ -0,0 +1,56 @@
|
||||
#!/bin/bash
|
||||
|
||||
/usr/local/bin/php -v
|
||||
|
||||
### create system user for php pool
|
||||
if [ ! "$PHP_USER" == "" ] && [ ! "$PHP_UID" == "" ] && [ ! "$PHP_GID" == "" ] && [ ! "$PHP_HOME" == "" ]; then
|
||||
echo "env PHP_USER: creating new system user: ${PHP_USER} ${PHP_UID}:${PHP_GID} ${PHP_HOME}"
|
||||
groupadd -f $PHP_USER -g $PHP_GID && \
|
||||
useradd -d $PHP_HOME -u $PHP_UID -g $PHP_GID -s /bin/false $PHP_USER
|
||||
fi
|
||||
|
||||
### load PHP ini configurations
|
||||
if [ ! "$PHP_INI_PATH" == "" ]; then
|
||||
printf "env PHP_INI_PATH: "
|
||||
for f in ${PHP_INI_PATH}; do
|
||||
printf "$f, ";
|
||||
rm -f /usr/local/etc/php/conf.d/${f##*/}
|
||||
cp $f /usr/local/etc/php/conf.d/
|
||||
done
|
||||
echo
|
||||
fi
|
||||
|
||||
### make sure to create clean php-fpm.conf
|
||||
### to avoid adding multiple times the same lines next
|
||||
### in case container is restarting
|
||||
echo "[global]" > /usr/local/etc/php-fpm.conf
|
||||
echo "include=etc/php-fpm.d/*.conf" >> /usr/local/etc/php-fpm.conf
|
||||
|
||||
### load PHP-FPM pool configurations
|
||||
if [ ! "$PHP_POOL_PATH" == "" ]; then
|
||||
printf "env PHP_POOL_PATH: "
|
||||
for f in ${PHP_POOL_PATH}; do
|
||||
printf "$f, ";
|
||||
rm -f /usr/local/etc/php-fpm.d/${f##*/}
|
||||
cp $f /usr/local/etc/php-fpm.d/
|
||||
done
|
||||
echo
|
||||
echo "include=$PHP_POOL_PATH" >> /usr/local/etc/php-fpm.conf
|
||||
fi
|
||||
|
||||
### load boot bash scripts
|
||||
for f in /usr/local/bin/*.sh; do
|
||||
/bin/bash -c $f
|
||||
done
|
||||
|
||||
### load bash scripts
|
||||
if [ ! "$PHP_BOOT_SCRIPTS" == "" ]; then
|
||||
printf "env PHP_BOOT_SCRIPTS: "
|
||||
for f in $PHP_BOOT_SCRIPTS; do
|
||||
printf "${f##*/}, ";
|
||||
done
|
||||
echo
|
||||
for f in $PHP_BOOT_SCRIPTS; do
|
||||
/bin/bash -c $f
|
||||
done
|
||||
fi
|
||||
+11
@@ -0,0 +1,11 @@
|
||||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
/usr/local/bin/docker-boot
|
||||
|
||||
# first arg is `-f` or `--some-option`
|
||||
if [ "${1#-}" != "$1" ]; then
|
||||
set -- php-fpm "$@"
|
||||
fi
|
||||
|
||||
exec "$@"
|
||||
Executable
+8
@@ -0,0 +1,8 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! "$NEWRELIC_LICENSE" == "" ] ; then
|
||||
echo "env NEWRELIC_LICENSE: setting up newrelic license"
|
||||
sed -i "s/REPLACE_WITH_REAL_KEY/$NEWRELIC_LICENSE/g" /usr/local/etc/php/conf.d/newrelic.ini
|
||||
nrsysmond-config --set license_key=$NEWRELIC_LICENSE
|
||||
service newrelic-sysmond start > /dev/null
|
||||
fi
|
||||
Executable
+24
@@ -0,0 +1,24 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ -z ${SMTP_LOGIN+x} ] && [ -z ${SMTP_PASSWORD+x} ] && [ ! "$SMTP_LOGIN" == "" ] && [ ! "$SMTP_PASSWORD" == "" ]; then
|
||||
echo "env SMTP_LOGIN: sendgrid credentials for email routing";
|
||||
echo "[smtp.sendgrid.net]:2525 ${SMTP_LOGIN}:${SMTP_PASSWORD}" >> /etc/postfix/sasl_passwd
|
||||
|
||||
postmap /etc/postfix/sasl_passwd
|
||||
chmod 600 /etc/postfix/sasl_passwd.db
|
||||
rm /etc/postfix/sasl_passwd
|
||||
|
||||
### update email relay configuration for SendGrid
|
||||
sed -i 's/default_transport = error//g' /etc/postfix/main.cf && \
|
||||
sed -i 's/relay_transport = error//g' /etc/postfix/main.cf && \
|
||||
sed -i 's/relayhost = //g' /etc/postfix/main.cf && \
|
||||
|
||||
echo "relayhost = [smtp.sendgrid.net]:2525" >> /etc/postfix/main.cf && \
|
||||
echo "smtp_tls_security_level = encrypt" >> /etc/postfix/main.cf && \
|
||||
echo "smtp_sasl_auth_enable = yes" >> /etc/postfix/main.cf && \
|
||||
echo "smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd" >> /etc/postfix/main.cf && \
|
||||
echo "header_size_limit = 4096000" >> /etc/postfix/main.cf && \
|
||||
echo "smtp_sasl_security_options = noanonymous" >> /etc/postfix/main.cf
|
||||
|
||||
/etc/init.d/postfix start > /dev/null
|
||||
fi
|
||||
Executable
+8
@@ -0,0 +1,8 @@
|
||||
#!/bin/bash
|
||||
|
||||
### update PHP session handler
|
||||
if [ ! "$PHP_SESSION_HANDLER" == "" ] && [ ! "$PHP_SESSION_PATH" == "" ]; then
|
||||
echo "env PHP_SESSION_HANDLER: updating php session handler [ $PHP_SESSION_PATH ]"
|
||||
echo "session.save_handler = $PHP_SESSION_HANDLER" > /usr/local/etc/php/conf.d/zz-session.ini
|
||||
echo "session.save_path = \"$PHP_SESSION_PATH\"" >> /usr/local/etc/php/conf.d/zz-session.ini
|
||||
fi
|
||||
@@ -0,0 +1,16 @@
|
||||
PHP_UID=1000
|
||||
PHP_GID=1000
|
||||
PHP_HOME=/app
|
||||
PHP_USER=php-fpm
|
||||
# PHP_INI_SCAN_DIR=/cfgs:/usr/local/etc/php/conf.d
|
||||
PHP_INI_PATH=/cfgs/php.ini
|
||||
PHP_POOL_PATH=/cfgs/*/*-pool.conf
|
||||
PHP_BOOT_SCRIPTS=/cfgs/start.sh
|
||||
PHP_CRONTABS_PATH=/cfgs/cron
|
||||
PHP_SESSION_HANDLER=redis
|
||||
PHP_SESSION_PATH=tcp://redis.host:6379
|
||||
|
||||
# private
|
||||
TEST_EMAIL=name@domain.com
|
||||
NEWRELIC_LICENSE=newrelic_license
|
||||
SENDGRID_API_KEY=sendgrid_api_key
|
||||
@@ -0,0 +1 @@
|
||||
.env
|
||||
@@ -0,0 +1,239 @@
|
||||
FROM php:7.0-fpm
|
||||
|
||||
RUN apt-get update && apt-get upgrade -y && \
|
||||
apt-get install -y --no-install-recommends \
|
||||
git \
|
||||
libmemcached-dev \
|
||||
libz-dev \
|
||||
libpq-dev \
|
||||
libjpeg-dev \
|
||||
libfreetype6-dev \
|
||||
libssl-dev \
|
||||
libmcrypt-dev
|
||||
|
||||
RUN docker-php-ext-install mcrypt
|
||||
RUN docker-php-ext-install mysqli pdo_mysql
|
||||
|
||||
# install the PHP gd library
|
||||
RUN docker-php-ext-configure gd \
|
||||
--enable-gd-native-ttf \
|
||||
--with-jpeg-dir=/usr/lib \
|
||||
--with-freetype-dir=/usr/include/freetype2 && \
|
||||
docker-php-ext-install gd
|
||||
|
||||
# install the soap extension
|
||||
RUN apt-get update -yqq && \
|
||||
apt-get -y install libxml2-dev && \
|
||||
docker-php-ext-install soap
|
||||
|
||||
# install Php Redis Extension
|
||||
RUN pecl install -o -f redis \
|
||||
&& rm -rf /tmp/pear \
|
||||
&& docker-php-ext-enable redis
|
||||
|
||||
# install the mongodb extension
|
||||
RUN pecl install mongodb && docker-php-ext-enable mongodb
|
||||
|
||||
# install bcmath, mbstring and zip extensions
|
||||
RUN docker-php-ext-install bcmath && \
|
||||
docker-php-ext-install mbstring && \
|
||||
docker-php-ext-install zip
|
||||
|
||||
# enable Exif PHP extentions requirements
|
||||
RUN docker-php-ext-install exif
|
||||
|
||||
# tokenizer Modifications:
|
||||
RUN docker-php-ext-install tokenizer
|
||||
|
||||
# install intl and requirements
|
||||
RUN apt-get update -yqq && \
|
||||
apt-get install -y zlib1g-dev libicu-dev g++ && \
|
||||
docker-php-ext-configure intl && \
|
||||
docker-php-ext-install intl
|
||||
|
||||
# install the ghostscript extension for PDF editing
|
||||
RUN apt-get update -yqq \
|
||||
&& apt-get install -y \
|
||||
poppler-utils \
|
||||
ghostscript
|
||||
|
||||
# LDAP:
|
||||
RUN apt-get update -yqq && \
|
||||
apt-get install -y libldap2-dev && \
|
||||
docker-php-ext-configure ldap --with-libdir=lib/x86_64-linux-gnu/ && \
|
||||
docker-php-ext-install ldap
|
||||
|
||||
RUN yes "" | pecl install msgpack-beta \
|
||||
&& echo "extension=msgpack.so" > /usr/local/etc/php/conf.d/ext-msgpack.ini
|
||||
|
||||
# compile igbinary extension
|
||||
RUN cd /tmp/ && git clone https://github.com/igbinary/igbinary "php-igbinary" && \
|
||||
cd php-igbinary && \
|
||||
phpize && \
|
||||
./configure && \
|
||||
make && \
|
||||
make install && \
|
||||
make clean && \
|
||||
docker-php-ext-enable igbinary
|
||||
|
||||
# curl extension
|
||||
RUN apt-get install -y curl libcurl4-openssl-dev --no-install-recommends && \
|
||||
docker-php-ext-install curl
|
||||
|
||||
# data structures extension
|
||||
RUN pecl install ds && \
|
||||
docker-php-ext-enable ds
|
||||
|
||||
# imagick
|
||||
RUN apt-get update && apt-get install -y libmagickwand-6.q16-dev --no-install-recommends && \
|
||||
ln -s /usr/lib/x86_64-linux-gnu/ImageMagick-6.8.9/bin-Q16/MagickWand-config /usr/bin && \
|
||||
pecl install imagick && \
|
||||
echo "extension=imagick.so" > /usr/local/etc/php/conf.d/ext-imagick.ini
|
||||
|
||||
# ssh2 module
|
||||
RUN apt-get install -y libssh2-1-dev && \
|
||||
pecl install ssh2-1.0 && \
|
||||
docker-php-ext-enable ssh2
|
||||
|
||||
# php-module: curl dom bz2 gd json mysqli pcntl pdo pdo_mysql phar posix
|
||||
RUN apt-get install -y libxml2-dev libbz2-dev re2c libpng++-dev \
|
||||
libjpeg-dev libvpx-dev zlib1g-dev libgd-dev \
|
||||
libtidy-dev libxslt1-dev libmagic-dev libexif-dev file \
|
||||
sqlite3 libsqlite3-dev libxslt-dev
|
||||
|
||||
RUN export CFLAGS="-I/usr/src/php" && \
|
||||
docker-php-ext-install xmlreader xmlwriter
|
||||
|
||||
RUN docker-php-ext-configure json && \
|
||||
docker-php-ext-configure session && \
|
||||
docker-php-ext-configure ctype && \
|
||||
docker-php-ext-configure tokenizer && \
|
||||
docker-php-ext-configure simplexml && \
|
||||
docker-php-ext-configure dom && \
|
||||
docker-php-ext-configure mbstring && \
|
||||
docker-php-ext-configure zip && \
|
||||
docker-php-ext-configure pdo && \
|
||||
docker-php-ext-configure pdo_sqlite && \
|
||||
docker-php-ext-configure pdo_mysql && \
|
||||
docker-php-ext-configure mysqli && \
|
||||
docker-php-ext-configure iconv && \
|
||||
docker-php-ext-configure xml && \
|
||||
docker-php-ext-configure phar
|
||||
|
||||
RUN docker-php-ext-install \
|
||||
dom \
|
||||
bz2 \
|
||||
json \
|
||||
pcntl \
|
||||
phar \
|
||||
posix \
|
||||
simplexml \
|
||||
soap \
|
||||
tidy \
|
||||
xml \
|
||||
xmlrpc \
|
||||
xsl \
|
||||
calendar \
|
||||
ctype \
|
||||
fileinfo \
|
||||
ftp \
|
||||
sysvmsg \
|
||||
sysvsem \
|
||||
sysvshm
|
||||
|
||||
# install the php memcache & memcached extension
|
||||
RUN set -x \
|
||||
&& apt-get update && apt-get install -y --no-install-recommends unzip libssl-dev libpcre3 libpcre3-dev \
|
||||
&& cd /tmp \
|
||||
&& curl -sSL -o php7.zip https://github.com/websupport-sk/pecl-memcache/archive/php7.zip \
|
||||
&& unzip php7 \
|
||||
&& cd pecl-memcache-php7 \
|
||||
&& /usr/local/bin/phpize \
|
||||
&& ./configure --with-php-config=/usr/local/bin/php-config \
|
||||
&& make \
|
||||
&& make install \
|
||||
&& echo "extension=memcache.so" > /usr/local/etc/php/conf.d/ext-memcache.ini \
|
||||
&& rm -rf /tmp/pecl-memcache-php7 php7.zip
|
||||
|
||||
RUN curl -L -o /tmp/memcached.tar.gz "https://github.com/php-memcached-dev/php-memcached/archive/php7.tar.gz" \
|
||||
&& mkdir -p memcached \
|
||||
&& tar -C memcached -zxvf /tmp/memcached.tar.gz --strip 1 \
|
||||
&& ( \
|
||||
cd memcached \
|
||||
&& phpize \
|
||||
&& ./configure \
|
||||
&& make -j$(nproc) \
|
||||
&& make install \
|
||||
) \
|
||||
&& rm -r memcached \
|
||||
&& rm /tmp/memcached.tar.gz \
|
||||
&& docker-php-ext-enable memcached
|
||||
|
||||
# mhash
|
||||
RUN apt-get install -y libmhash2 libmhash-dev libc-client-dev libkrb5-dev
|
||||
|
||||
RUN docker-php-ext-configure imap --with-kerberos --with-imap-ssl \
|
||||
&& docker-php-ext-install imap
|
||||
|
||||
RUN docker-php-ext-configure hash --with-mhash && \
|
||||
docker-php-ext-install hash
|
||||
|
||||
# Opcache
|
||||
RUN docker-php-ext-install opcache
|
||||
|
||||
# install APCu
|
||||
RUN pecl install apcu-5.1.8 && \
|
||||
pecl install apcu_bc-1.0.3 && \
|
||||
docker-php-ext-enable apcu --ini-name 10-docker-php-ext-apcu.ini && \
|
||||
docker-php-ext-enable apc --ini-name 20-docker-php-ext-apc.ini
|
||||
|
||||
RUN apt-get update -y && apt-get install -y gnupg apt-transport-https locales
|
||||
|
||||
# install MSSQL support
|
||||
# install ODBC driver
|
||||
#RUN curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add - && \
|
||||
# curl https://packages.microsoft.com/config/debian/8/prod.list > /etc/apt/sources.list.d/mssql-release.list && \
|
||||
# export DEBIAN_FRONTEND=noninteractive && apt-get update -y && \
|
||||
# ACCEPT_EULA=Y apt-get install -y msodbcsql unixodbc-dev
|
||||
#RUN set -xe \
|
||||
# && pecl install pdo_sqlsrv \
|
||||
# && docker-php-ext-enable pdo_sqlsrv \
|
||||
# && apt-get purge -y unixodbc-dev && apt-get autoremove -y && apt-get clean
|
||||
|
||||
# set locale to utf-8
|
||||
RUN echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && \
|
||||
locale-gen
|
||||
ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en' LC_ALL='en_US.UTF-8'
|
||||
|
||||
#--------------------------------------------------------------------------
|
||||
# Final Touches
|
||||
#--------------------------------------------------------------------------
|
||||
|
||||
# install required libs for health check
|
||||
RUN apt-get -y install libfcgi0ldbl nano htop iotop lsof cron mariadb-client redis-tools
|
||||
|
||||
# install NewRelic agent
|
||||
RUN echo 'deb http://apt.newrelic.com/debian/ newrelic non-free' | tee /etc/apt/sources.list.d/newrelic.list && \
|
||||
curl https://download.newrelic.com/548C16BF.gpg | apt-key add - && \
|
||||
apt-get -y update && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get -y install newrelic-php5 newrelic-sysmond && \
|
||||
export NR_INSTALL_SILENT=1 && newrelic-install install
|
||||
|
||||
# install SendGrid
|
||||
RUN echo "postfix postfix/mailname string localhost" | debconf-set-selections && \
|
||||
echo "postfix postfix/main_mailer_type string 'Internet Site'" | debconf-set-selections && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install postfix libsasl2-modules -y
|
||||
|
||||
# Set default work directory
|
||||
ADD scripts/* /usr/local/bin/
|
||||
RUN chmod +x /usr/local/bin/*
|
||||
|
||||
# Health check
|
||||
RUN echo '#!/bin/bash' > /healthcheck && \
|
||||
echo 'SCRIPT_NAME=/health SCRIPT_FILENAME=/health REQUEST_METHOD=GET cgi-fcgi -bind -connect 127.0.0.1:9000 || exit 1' >> /healthcheck && \
|
||||
chmod +x /healthcheck
|
||||
|
||||
# Clean up
|
||||
RUN apt-get remove -y git && apt-get autoremove -y && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
||||
|
||||
WORKDIR /
|
||||
Executable
+1
@@ -0,0 +1 @@
|
||||
* * * * * root /cfgs/job.sh
|
||||
Executable
+2
@@ -0,0 +1,2 @@
|
||||
#!/bin/bash
|
||||
echo "[ cronjob task ] executed at `date`" > /proc/1/fd/2
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,2 @@
|
||||
#!/bin/bash
|
||||
echo "[ start.sh ] Boot script test..." > /proc/1/fd/2
|
||||
@@ -0,0 +1,423 @@
|
||||
; Start a new pool named 'www'.
|
||||
; the variable $pool can be used in any directive and will be replaced by the
|
||||
; pool name ('www' here)
|
||||
[www]
|
||||
|
||||
; Per pool prefix
|
||||
; It only applies on the following directives:
|
||||
; - 'access.log'
|
||||
; - 'slowlog'
|
||||
; - 'listen' (unixsocket)
|
||||
; - 'chroot'
|
||||
; - 'chdir'
|
||||
; - 'php_values'
|
||||
; - 'php_admin_values'
|
||||
; When not set, the global prefix (or NONE) applies instead.
|
||||
; Note: This directive can also be relative to the global prefix.
|
||||
; Default Value: none
|
||||
;prefix = /path/to/pools/$pool
|
||||
|
||||
; Unix user/group of processes
|
||||
; Note: The user is mandatory. If the group is not set, the default user's group
|
||||
; will be used.
|
||||
user = www-data
|
||||
group = www-data
|
||||
|
||||
; The address on which to accept FastCGI requests.
|
||||
; Valid syntaxes are:
|
||||
; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on
|
||||
; a specific port;
|
||||
; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
|
||||
; a specific port;
|
||||
; 'port' - to listen on a TCP socket to all addresses
|
||||
; (IPv6 and IPv4-mapped) on a specific port;
|
||||
; '/path/to/unix/socket' - to listen on a unix socket.
|
||||
; Note: This value is mandatory.
|
||||
listen = 9000
|
||||
|
||||
; Set listen(2) backlog.
|
||||
; Default Value: 511 (-1 on FreeBSD and OpenBSD)
|
||||
;listen.backlog = 511
|
||||
|
||||
; Set permissions for unix socket, if one is used. In Linux, read/write
|
||||
; permissions must be set in order to allow connections from a web server. Many
|
||||
; BSD-derived systems allow connections regardless of permissions.
|
||||
; Default Values: user and group are set as the running user
|
||||
; mode is set to 0660
|
||||
;listen.owner = www-data
|
||||
;listen.group = www-data
|
||||
;listen.mode = 0660
|
||||
; When POSIX Access Control Lists are supported you can set them using
|
||||
; these options, value is a comma separated list of user/group names.
|
||||
; When set, listen.owner and listen.group are ignored
|
||||
;listen.acl_users =
|
||||
;listen.acl_groups =
|
||||
|
||||
; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
|
||||
; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
|
||||
; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
|
||||
; must be separated by a comma. If this value is left blank, connections will be
|
||||
; accepted from any ip address.
|
||||
; Default Value: any
|
||||
;listen.allowed_clients = 127.0.0.1
|
||||
|
||||
; Specify the nice(2) priority to apply to the pool processes (only if set)
|
||||
; The value can vary from -19 (highest priority) to 20 (lower priority)
|
||||
; Note: - It will only work if the FPM master process is launched as root
|
||||
; - The pool processes will inherit the master process priority
|
||||
; unless it specified otherwise
|
||||
; Default Value: no set
|
||||
; process.priority = -19
|
||||
|
||||
; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
|
||||
; or group is differrent than the master process user. It allows to create process
|
||||
; core dump and ptrace the process for the pool user.
|
||||
; Default Value: no
|
||||
; process.dumpable = yes
|
||||
|
||||
; Choose how the process manager will control the number of child processes.
|
||||
; Possible Values:
|
||||
; static - a fixed number (pm.max_children) of child processes;
|
||||
; dynamic - the number of child processes are set dynamically based on the
|
||||
; following directives. With this process management, there will be
|
||||
; always at least 1 children.
|
||||
; pm.max_children - the maximum number of children that can
|
||||
; be alive at the same time.
|
||||
; pm.start_servers - the number of children created on startup.
|
||||
; pm.min_spare_servers - the minimum number of children in 'idle'
|
||||
; state (waiting to process). If the number
|
||||
; of 'idle' processes is less than this
|
||||
; number then some children will be created.
|
||||
; pm.max_spare_servers - the maximum number of children in 'idle'
|
||||
; state (waiting to process). If the number
|
||||
; of 'idle' processes is greater than this
|
||||
; number then some children will be killed.
|
||||
; ondemand - no children are created at startup. Children will be forked when
|
||||
; new requests will connect. The following parameter are used:
|
||||
; pm.max_children - the maximum number of children that
|
||||
; can be alive at the same time.
|
||||
; pm.process_idle_timeout - The number of seconds after which
|
||||
; an idle process will be killed.
|
||||
; Note: This value is mandatory.
|
||||
pm = dynamic
|
||||
|
||||
; The number of child processes to be created when pm is set to 'static' and the
|
||||
; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
|
||||
; This value sets the limit on the number of simultaneous requests that will be
|
||||
; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
|
||||
; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
|
||||
; CGI. The below defaults are based on a server without much resources. Don't
|
||||
; forget to tweak pm.* to fit your needs.
|
||||
; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
|
||||
; Note: This value is mandatory.
|
||||
pm.max_children = 5
|
||||
|
||||
; The number of child processes created on startup.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
|
||||
pm.start_servers = 2
|
||||
|
||||
; The desired minimum number of idle server processes.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Note: Mandatory when pm is set to 'dynamic'
|
||||
pm.min_spare_servers = 1
|
||||
|
||||
; The desired maximum number of idle server processes.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Note: Mandatory when pm is set to 'dynamic'
|
||||
pm.max_spare_servers = 3
|
||||
|
||||
; The number of seconds after which an idle process will be killed.
|
||||
; Note: Used only when pm is set to 'ondemand'
|
||||
; Default Value: 10s
|
||||
;pm.process_idle_timeout = 10s;
|
||||
|
||||
; The number of requests each child process should execute before respawning.
|
||||
; This can be useful to work around memory leaks in 3rd party libraries. For
|
||||
; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
|
||||
; Default Value: 0
|
||||
;pm.max_requests = 500
|
||||
|
||||
; The URI to view the FPM status page. If this value is not set, no URI will be
|
||||
; recognized as a status page. It shows the following informations:
|
||||
; pool - the name of the pool;
|
||||
; process manager - static, dynamic or ondemand;
|
||||
; start time - the date and time FPM has started;
|
||||
; start since - number of seconds since FPM has started;
|
||||
; accepted conn - the number of request accepted by the pool;
|
||||
; listen queue - the number of request in the queue of pending
|
||||
; connections (see backlog in listen(2));
|
||||
; max listen queue - the maximum number of requests in the queue
|
||||
; of pending connections since FPM has started;
|
||||
; listen queue len - the size of the socket queue of pending connections;
|
||||
; idle processes - the number of idle processes;
|
||||
; active processes - the number of active processes;
|
||||
; total processes - the number of idle + active processes;
|
||||
; max active processes - the maximum number of active processes since FPM
|
||||
; has started;
|
||||
; max children reached - number of times, the process limit has been reached,
|
||||
; when pm tries to start more children (works only for
|
||||
; pm 'dynamic' and 'ondemand');
|
||||
; Value are updated in real time.
|
||||
; Example output:
|
||||
; pool: www
|
||||
; process manager: static
|
||||
; start time: 01/Jul/2011:17:53:49 +0200
|
||||
; start since: 62636
|
||||
; accepted conn: 190460
|
||||
; listen queue: 0
|
||||
; max listen queue: 1
|
||||
; listen queue len: 42
|
||||
; idle processes: 4
|
||||
; active processes: 11
|
||||
; total processes: 15
|
||||
; max active processes: 12
|
||||
; max children reached: 0
|
||||
;
|
||||
; By default the status page output is formatted as text/plain. Passing either
|
||||
; 'html', 'xml' or 'json' in the query string will return the corresponding
|
||||
; output syntax. Example:
|
||||
; http://www.foo.bar/status
|
||||
; http://www.foo.bar/status?json
|
||||
; http://www.foo.bar/status?html
|
||||
; http://www.foo.bar/status?xml
|
||||
;
|
||||
; By default the status page only outputs short status. Passing 'full' in the
|
||||
; query string will also return status for each pool process.
|
||||
; Example:
|
||||
; http://www.foo.bar/status?full
|
||||
; http://www.foo.bar/status?json&full
|
||||
; http://www.foo.bar/status?html&full
|
||||
; http://www.foo.bar/status?xml&full
|
||||
; The Full status returns for each process:
|
||||
; pid - the PID of the process;
|
||||
; state - the state of the process (Idle, Running, ...);
|
||||
; start time - the date and time the process has started;
|
||||
; start since - the number of seconds since the process has started;
|
||||
; requests - the number of requests the process has served;
|
||||
; request duration - the duration in µs of the requests;
|
||||
; request method - the request method (GET, POST, ...);
|
||||
; request URI - the request URI with the query string;
|
||||
; content length - the content length of the request (only with POST);
|
||||
; user - the user (PHP_AUTH_USER) (or '-' if not set);
|
||||
; script - the main script called (or '-' if not set);
|
||||
; last request cpu - the %cpu the last request consumed
|
||||
; it's always 0 if the process is not in Idle state
|
||||
; because CPU calculation is done when the request
|
||||
; processing has terminated;
|
||||
; last request memory - the max amount of memory the last request consumed
|
||||
; it's always 0 if the process is not in Idle state
|
||||
; because memory calculation is done when the request
|
||||
; processing has terminated;
|
||||
; If the process is in Idle state, then informations are related to the
|
||||
; last request the process has served. Otherwise informations are related to
|
||||
; the current request being served.
|
||||
; Example output:
|
||||
; ************************
|
||||
; pid: 31330
|
||||
; state: Running
|
||||
; start time: 01/Jul/2011:17:53:49 +0200
|
||||
; start since: 63087
|
||||
; requests: 12808
|
||||
; request duration: 1250261
|
||||
; request method: GET
|
||||
; request URI: /test_mem.php?N=10000
|
||||
; content length: 0
|
||||
; user: -
|
||||
; script: /home/fat/web/docs/php/test_mem.php
|
||||
; last request cpu: 0.00
|
||||
; last request memory: 0
|
||||
;
|
||||
; Note: There is a real-time FPM status monitoring sample web page available
|
||||
; It's available in: /usr/local/share/php/fpm/status.html
|
||||
;
|
||||
; Note: The value must start with a leading slash (/). The value can be
|
||||
; anything, but it may not be a good idea to use the .php extension or it
|
||||
; may conflict with a real PHP file.
|
||||
; Default Value: not set
|
||||
pm.status_path = /status
|
||||
|
||||
; The ping URI to call the monitoring page of FPM. If this value is not set, no
|
||||
; URI will be recognized as a ping page. This could be used to test from outside
|
||||
; that FPM is alive and responding, or to
|
||||
; - create a graph of FPM availability (rrd or such);
|
||||
; - remove a server from a group if it is not responding (load balancing);
|
||||
; - trigger alerts for the operating team (24/7).
|
||||
; Note: The value must start with a leading slash (/). The value can be
|
||||
; anything, but it may not be a good idea to use the .php extension or it
|
||||
; may conflict with a real PHP file.
|
||||
; Default Value: not set
|
||||
ping.path = /health
|
||||
|
||||
; This directive may be used to customize the response of a ping request. The
|
||||
; response is formatted as text/plain with a 200 response code.
|
||||
; Default Value: pong
|
||||
ping.response = OK
|
||||
|
||||
; The access log file
|
||||
; Default: not set
|
||||
;access.log = log/$pool.access.log
|
||||
|
||||
; The access log format.
|
||||
; The following syntax is allowed
|
||||
; %%: the '%' character
|
||||
; %C: %CPU used by the request
|
||||
; it can accept the following format:
|
||||
; - %{user}C for user CPU only
|
||||
; - %{system}C for system CPU only
|
||||
; - %{total}C for user + system CPU (default)
|
||||
; %d: time taken to serve the request
|
||||
; it can accept the following format:
|
||||
; - %{seconds}d (default)
|
||||
; - %{miliseconds}d
|
||||
; - %{mili}d
|
||||
; - %{microseconds}d
|
||||
; - %{micro}d
|
||||
; %e: an environment variable (same as $_ENV or $_SERVER)
|
||||
; it must be associated with embraces to specify the name of the env
|
||||
; variable. Some exemples:
|
||||
; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
|
||||
; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
|
||||
; %f: script filename
|
||||
; %l: content-length of the request (for POST request only)
|
||||
; %m: request method
|
||||
; %M: peak of memory allocated by PHP
|
||||
; it can accept the following format:
|
||||
; - %{bytes}M (default)
|
||||
; - %{kilobytes}M
|
||||
; - %{kilo}M
|
||||
; - %{megabytes}M
|
||||
; - %{mega}M
|
||||
; %n: pool name
|
||||
; %o: output header
|
||||
; it must be associated with embraces to specify the name of the header:
|
||||
; - %{Content-Type}o
|
||||
; - %{X-Powered-By}o
|
||||
; - %{Transfert-Encoding}o
|
||||
; - ....
|
||||
; %p: PID of the child that serviced the request
|
||||
; %P: PID of the parent of the child that serviced the request
|
||||
; %q: the query string
|
||||
; %Q: the '?' character if query string exists
|
||||
; %r: the request URI (without the query string, see %q and %Q)
|
||||
; %R: remote IP address
|
||||
; %s: status (response code)
|
||||
; %t: server time the request was received
|
||||
; it can accept a strftime(3) format:
|
||||
; %d/%b/%Y:%H:%M:%S %z (default)
|
||||
; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
|
||||
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
|
||||
; %T: time the log has been written (the request has finished)
|
||||
; it can accept a strftime(3) format:
|
||||
; %d/%b/%Y:%H:%M:%S %z (default)
|
||||
; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
|
||||
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
|
||||
; %u: remote user
|
||||
;
|
||||
; Default: "%R - %u %t \"%m %r\" %s"
|
||||
;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
|
||||
|
||||
; The log file for slow requests
|
||||
; Default Value: not set
|
||||
; Note: slowlog is mandatory if request_slowlog_timeout is set
|
||||
;slowlog = log/$pool.log.slow
|
||||
|
||||
; The timeout for serving a single request after which a PHP backtrace will be
|
||||
; dumped to the 'slowlog' file. A value of '0s' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
;request_slowlog_timeout = 0
|
||||
|
||||
; Depth of slow log stack trace.
|
||||
; Default Value: 20
|
||||
;request_slowlog_trace_depth = 20
|
||||
|
||||
; The timeout for serving a single request after which the worker process will
|
||||
; be killed. This option should be used when the 'max_execution_time' ini option
|
||||
; does not stop script execution for some reason. A value of '0' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
request_terminate_timeout = 360
|
||||
|
||||
; Set open file descriptor rlimit.
|
||||
; Default Value: system defined value
|
||||
rlimit_files = 131072
|
||||
|
||||
; Set max core size rlimit.
|
||||
; Possible Values: 'unlimited' or an integer greater or equal to 0
|
||||
; Default Value: system defined value
|
||||
rlimit_core = unlimited
|
||||
|
||||
; Chroot to this directory at the start. This value must be defined as an
|
||||
; absolute path. When this value is not set, chroot is not used.
|
||||
; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
|
||||
; of its subdirectories. If the pool prefix is not set, the global prefix
|
||||
; will be used instead.
|
||||
; Note: chrooting is a great security feature and should be used whenever
|
||||
; possible. However, all PHP paths will be relative to the chroot
|
||||
; (error_log, sessions.save_path, ...).
|
||||
; Default Value: not set
|
||||
;chroot =
|
||||
|
||||
; Chdir to this directory at the start.
|
||||
; Note: relative path can be used.
|
||||
; Default Value: current directory or / when chroot
|
||||
;chdir = /var/www
|
||||
|
||||
; Redirect worker stdout and stderr into main error log. If not set, stdout and
|
||||
; stderr will be redirected to /dev/null according to FastCGI specs.
|
||||
; Note: on highloaded environement, this can cause some delay in the page
|
||||
; process time (several ms).
|
||||
; Default Value: no
|
||||
catch_workers_output = yes
|
||||
|
||||
; Clear environment in FPM workers
|
||||
; Prevents arbitrary environment variables from reaching FPM worker processes
|
||||
; by clearing the environment in workers before env vars specified in this
|
||||
; pool configuration are added.
|
||||
; Setting to "no" will make all environment variables available to PHP code
|
||||
; via getenv(), $_ENV and $_SERVER.
|
||||
; Default Value: yes
|
||||
;clear_env = no
|
||||
|
||||
; Limits the extensions of the main script FPM will allow to parse. This can
|
||||
; prevent configuration mistakes on the web server side. You should only limit
|
||||
; FPM to .php extensions to prevent malicious users to use other extensions to
|
||||
; execute php code.
|
||||
; Note: set an empty value to allow all extensions.
|
||||
; Default Value: .php
|
||||
;security.limit_extensions = .php .php3 .php4 .php5 .php7
|
||||
|
||||
; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
|
||||
; the current environment.
|
||||
; Default Value: clean env
|
||||
;env[HOSTNAME] = $HOSTNAME
|
||||
;env[PATH] = /usr/local/bin:/usr/bin:/bin
|
||||
;env[TMP] = /tmp
|
||||
;env[TMPDIR] = /tmp
|
||||
;env[TEMP] = /tmp
|
||||
|
||||
; Additional php.ini defines, specific to this pool of workers. These settings
|
||||
; overwrite the values previously defined in the php.ini. The directives are the
|
||||
; same as the PHP SAPI:
|
||||
; php_value/php_flag - you can set classic ini defines which can
|
||||
; be overwritten from PHP call 'ini_set'.
|
||||
; php_admin_value/php_admin_flag - these directives won't be overwritten by
|
||||
; PHP call 'ini_set'
|
||||
; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
|
||||
|
||||
; Defining 'extension' will load the corresponding shared extension from
|
||||
; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
|
||||
; overwrite previously defined php.ini values, but will append the new value
|
||||
; instead.
|
||||
|
||||
; Note: path INI options can be relative and will be expanded with the prefix
|
||||
; (pool, global or /usr/local)
|
||||
|
||||
; Default Value: nothing is defined by default except the values in php.ini and
|
||||
; specified at startup with the -d argument
|
||||
;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
|
||||
;php_flag[display_errors] = off
|
||||
;php_admin_value[error_log] = /var/log/fpm-php.www.log
|
||||
;php_admin_flag[log_errors] = on
|
||||
;php_admin_value[memory_limit] = 32M
|
||||
@@ -0,0 +1,17 @@
|
||||
version: "3"
|
||||
|
||||
services:
|
||||
php70:
|
||||
build:
|
||||
context: ./
|
||||
dockerfile: Dockerfile
|
||||
depends_on:
|
||||
- redis
|
||||
hostname: php70
|
||||
container_name: php70
|
||||
volumes:
|
||||
- ./configs:/cfgs
|
||||
env_file: .env
|
||||
|
||||
redis:
|
||||
image: redis:latest
|
||||
Executable
+16
@@ -0,0 +1,16 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! "$PHP_CRONTABS_PATH" == "" ]; then
|
||||
echo "env CRONTABS_PATH: setting up crontabs [ $PHP_CRONTABS_PATH ]:";
|
||||
|
||||
for f in ${PHP_CRONTABS_PATH}; do
|
||||
echo " - $f";
|
||||
rm -f /etc/cron.d/${f##*/}
|
||||
cp $f /etc/cron.d/
|
||||
chmod 0644 /etc/cron.d/${f##*/}
|
||||
done
|
||||
|
||||
touch /var/log/cron.log
|
||||
printenv | grep -v "no_proxy" >> /etc/default/locale
|
||||
/etc/init.d/cron start > /dev/null
|
||||
fi
|
||||
@@ -0,0 +1,86 @@
|
||||
#!/bin/bash
|
||||
|
||||
echo "[`date +"%d-%b-%Y %T"`] PHP-FPM Docker container boot"
|
||||
|
||||
### create system user for php pool
|
||||
if [ ! "$PHP_USER" == "" ] && [ ! "$PHP_UID" == "" ] && [ ! "$PHP_GID" == "" ] && [ ! "$PHP_HOME" == "" ]; then
|
||||
echo "env PHP_USER: creating new system user: ${PHP_USER} ${PHP_UID}:${PHP_GID} ${PHP_HOME}"
|
||||
mkdir -p $PHP_HOME && \
|
||||
groupadd -f $PHP_USER -g $PHP_GID && \
|
||||
useradd -d $PHP_HOME -u $PHP_UID -g $PHP_GID -s /usr/sbin/nologin $PHP_USER
|
||||
fi
|
||||
|
||||
|
||||
### load PHP ini configurations
|
||||
if [ ! "$PHP_INI_PATH" == "" ]; then
|
||||
echo "env PHP_INI_PATH: copy from [ $PHP_INI_PATH ] into [ /usr/local/etc/php/conf.d/ ] folder"
|
||||
for f in ${PHP_INI_PATH}; do
|
||||
echo " - $f";
|
||||
rm -f /usr/local/etc/php/conf.d/${f##*/}
|
||||
cp $f /usr/local/etc/php/conf.d/
|
||||
done
|
||||
fi
|
||||
|
||||
|
||||
### make sure to create clean php-fpm.conf
|
||||
### to avoid adding multiple times the same lines next
|
||||
### in case container is restarting
|
||||
echo "[global]" > /usr/local/etc/php-fpm.conf
|
||||
echo "include=etc/php-fpm.d/*.conf" >> /usr/local/etc/php-fpm.conf
|
||||
|
||||
### load PHP-FPM pool configurations
|
||||
if [ ! "$PHP_POOL_PATH" == "" ]; then
|
||||
echo "env PHP_POOL_PATH: copy from [ $PHP_POOL_PATH ] into [ /usr/local/etc/php-fpm.d/ ] folder"
|
||||
for f in ${PHP_POOL_PATH}; do
|
||||
echo " - $f";
|
||||
rm -f /usr/local/etc/php-fpm.d/${f##*/}
|
||||
cp $f /usr/local/etc/php-fpm.d/
|
||||
done
|
||||
fi
|
||||
|
||||
|
||||
### scan for config files in folders from PHP_INI_SCAN_DIR
|
||||
if [ ! -z ${PHP_INI_SCAN_DIR+x} ] && [ "$PHP_INI_SCAN_DIR" != "" ] ; then
|
||||
echo "env PHP_INI_SCAN_DIR: copy from [ $PHP_INI_SCAN_DIR ] into [ /usr/local/etc/php-fpm.d/ ] folder"
|
||||
|
||||
### break down path by : separator
|
||||
IFS=':' read -ra DIRECTORIES <<< "$PHP_INI_SCAN_DIR"
|
||||
|
||||
for DIR in "${DIRECTORIES[@]}"; do
|
||||
### check if there are any php pool configuration files to copy
|
||||
COUNT=`ls -1 $DIR/*.conf 2>/dev/null | wc -l`
|
||||
|
||||
if [ $COUNT != "0" ] ; then
|
||||
echo " - $DIR/*.conf";
|
||||
cp -f $DIR/*.conf /usr/local/etc/php-fpm.d/
|
||||
fi
|
||||
done
|
||||
fi
|
||||
|
||||
|
||||
### load boot bash scripts
|
||||
for f in /usr/local/bin/*.sh; do
|
||||
/bin/bash -c $f
|
||||
done
|
||||
|
||||
### load additional on-demand scripts
|
||||
if [ ! -z ${PHP_BOOT_SCRIPTS+x} ] && [ "$PHP_BOOT_SCRIPTS" != "" ]; then
|
||||
echo "env PHP_BOOT_SCRIPTS: executing scripts in [ $PHP_BOOT_SCRIPTS ]"
|
||||
|
||||
for f in ${PHP_BOOT_SCRIPTS}; do
|
||||
echo " - $f";
|
||||
|
||||
rm -f /usr/local/bin/${f##*/}
|
||||
cp $f /usr/local/bin/
|
||||
|
||||
chmod +x /usr/local/bin/${f##*/}
|
||||
done
|
||||
|
||||
for f in ${PHP_BOOT_SCRIPTS}; do
|
||||
/bin/bash -c /usr/local/bin/${f##*/}
|
||||
done
|
||||
fi
|
||||
|
||||
### expose php version
|
||||
echo
|
||||
/usr/local/bin/php -v
|
||||
@@ -0,0 +1,11 @@
|
||||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
/usr/local/bin/docker-boot
|
||||
|
||||
# first arg is `-f` or `--some-option`
|
||||
if [ "${1#-}" != "$1" ]; then
|
||||
set -- php-fpm "$@"
|
||||
fi
|
||||
|
||||
exec "$@"
|
||||
@@ -0,0 +1,10 @@
|
||||
<?php
|
||||
|
||||
if (isset($_SERVER['TEST_EMAIL']) && trim($_SERVER['TEST_EMAIL']) != "") {
|
||||
$email = $_SERVER['TEST_EMAIL'];
|
||||
$subject = "PHP email test script";
|
||||
$message = "This is a test email to confirm that the PHP mail function works!";
|
||||
$headers = "From: " . $email;
|
||||
|
||||
mail($email, $subject, $message, $headers);
|
||||
}
|
||||
@@ -0,0 +1,13 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${NEWRELIC_LICENSE+x} ] && [ "$NEWRELIC_LICENSE" != "" ] ; then
|
||||
echo "env NEWRELIC_LICENSE: setting up newrelic license"
|
||||
sed -i "s/REPLACE_WITH_REAL_KEY/$NEWRELIC_LICENSE/g" /usr/local/etc/php/conf.d/newrelic.ini
|
||||
nrsysmond-config --set license_key=$NEWRELIC_LICENSE
|
||||
|
||||
service newrelic-sysmond start > /dev/null
|
||||
|
||||
chmod u+rw,g+rw,o+rw /var/log/newrelic/newrelic-daemon.log
|
||||
else
|
||||
rm -f /usr/local/etc/php/conf.d/newrelic.ini
|
||||
fi
|
||||
@@ -0,0 +1,38 @@
|
||||
#!/usr/local/bin/php
|
||||
<?php
|
||||
|
||||
/**
|
||||
* This script is a sendmail wrapper for php to log calls of the php mail() function.
|
||||
* Author: Till Brehm, www.ispconfig.org
|
||||
* (Hopefully) secured by David Goodwin <david @ _palepurple_.co.uk>
|
||||
* https://www.howtoforge.com/how-to-log-emails-sent-with-phps-mail-function-to-detect-form-spam
|
||||
*/
|
||||
|
||||
$sendmail_bin = '/usr/sbin/sendmail';
|
||||
|
||||
// Get the email content
|
||||
$mail = '';
|
||||
$logline = '';
|
||||
$pointer = fopen('php://stdin', 'r');
|
||||
|
||||
while ($line = fgets($pointer)) {
|
||||
if (preg_match('/^to:/i', $line) || preg_match('/^from:/i', $line)) {
|
||||
$logline .= trim($line) . ' ';
|
||||
}
|
||||
$mail .= $line;
|
||||
}
|
||||
|
||||
// Compose the sendmail command
|
||||
$command = 'echo ' . escapeshellarg($mail) . ' | ' . $sendmail_bin . ' -t -i';
|
||||
|
||||
if (isset($_SERVER['argc'])) {
|
||||
for ($i = 1; $i < $_SERVER['argc']; $i++) {
|
||||
$command .= escapeshellarg($_SERVER['argv'][$i]) . ' ';
|
||||
}
|
||||
}
|
||||
|
||||
// Write the log
|
||||
error_log("Email sent: " . $logline);
|
||||
|
||||
// Execute the command
|
||||
return shell_exec($command);
|
||||
@@ -0,0 +1,38 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${SENDGRID_API_KEY+x} ] && [ "$SENDGRID_API_KEY" != "" ]; then
|
||||
echo "env SMTP_LOGIN: sendgrid credentials for email routing";
|
||||
echo "[smtp.sendgrid.net]:2525 apikey:${SENDGRID_API_KEY}" > /etc/postfix/sasl_passwd
|
||||
|
||||
postmap /etc/postfix/sasl_passwd
|
||||
chmod 600 /etc/postfix/sasl_passwd.db
|
||||
rm /etc/postfix/sasl_passwd
|
||||
|
||||
### update email relay configuration for SendGrid
|
||||
sed -i 's/default_transport = error//g' /etc/postfix/main.cf
|
||||
sed -i 's/relay_transport = error//g' /etc/postfix/main.cf
|
||||
|
||||
### delete following lines if already exist before adding
|
||||
sed -i '/relayhost/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_tls_security_level/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_auth_enable/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_password_maps/d' /etc/postfix/main.cf
|
||||
sed -i '/header_size_limit/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_security_options/d' /etc/postfix/main.cf
|
||||
|
||||
### add following lines
|
||||
echo "relayhost = [smtp.sendgrid.net]:2525" >> /etc/postfix/main.cf
|
||||
echo "smtp_tls_security_level = encrypt" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_auth_enable = yes" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd" >> /etc/postfix/main.cf
|
||||
echo "header_size_limit = 4096000" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_security_options = noanonymous" >> /etc/postfix/main.cf
|
||||
|
||||
/etc/init.d/postfix start > /dev/null
|
||||
|
||||
### send test email if TEST_EMAIL env variable is set
|
||||
if [ ! -z ${TEST_EMAIL+x} ] && [ "$TEST_EMAIL" != "" ]; then
|
||||
echo " - sending test email to: [ $TEST_EMAIL ]";
|
||||
php /usr/local/bin/emailtest.php
|
||||
fi
|
||||
fi
|
||||
Executable
+8
@@ -0,0 +1,8 @@
|
||||
#!/bin/bash
|
||||
|
||||
### update PHP session handler
|
||||
if [ ! "$PHP_SESSION_HANDLER" == "" ] && [ ! "$PHP_SESSION_PATH" == "" ]; then
|
||||
echo "env PHP_SESSION_HANDLER: updating php session handler [ $PHP_SESSION_PATH ]"
|
||||
echo "session.save_handler = $PHP_SESSION_HANDLER" > /usr/local/etc/php/conf.d/zz-session.ini
|
||||
echo "session.save_path = \"$PHP_SESSION_PATH\"" >> /usr/local/etc/php/conf.d/zz-session.ini
|
||||
fi
|
||||
@@ -0,0 +1 @@
|
||||
.env
|
||||
@@ -0,0 +1,295 @@
|
||||
FROM php:7.1-fpm
|
||||
|
||||
MAINTAINER Mark Hilton <nerd305@gmail.com>
|
||||
|
||||
RUN apt-get update && \
|
||||
apt-get install -y --no-install-recommends \
|
||||
git \
|
||||
libmemcached-dev \
|
||||
libz-dev \
|
||||
libpq-dev \
|
||||
libjpeg-dev \
|
||||
libfreetype6-dev \
|
||||
libssl-dev \
|
||||
libmcrypt-dev
|
||||
|
||||
RUN docker-php-ext-install mcrypt
|
||||
RUN docker-php-ext-install mysqli pdo pdo_mysql
|
||||
|
||||
# install the PHP gd library
|
||||
RUN docker-php-ext-configure gd \
|
||||
--enable-gd-native-ttf \
|
||||
--with-jpeg-dir=/usr/lib \
|
||||
--with-freetype-dir=/usr/include/freetype2 && \
|
||||
docker-php-ext-install gd
|
||||
|
||||
# install the soap extension
|
||||
RUN apt-get update -yqq && \
|
||||
apt-get -y install libxml2-dev && \
|
||||
docker-php-ext-install soap
|
||||
|
||||
# install Php Redis Extension
|
||||
RUN pecl install -o -f redis \
|
||||
&& rm -rf /tmp/pear \
|
||||
&& docker-php-ext-enable redis
|
||||
|
||||
# install the mongodb extension
|
||||
RUN pecl install mongodb && \
|
||||
docker-php-ext-enable mongodb
|
||||
|
||||
# install bcmath, mbstring and zip extensions
|
||||
RUN docker-php-ext-install bcmath && \
|
||||
docker-php-ext-install mbstring && \
|
||||
docker-php-ext-install zip
|
||||
|
||||
# enable Exif PHP extentions requirements
|
||||
RUN docker-php-ext-install exif
|
||||
|
||||
# tokenizer Modifications:
|
||||
RUN docker-php-ext-install tokenizer
|
||||
|
||||
# install intl and requirements
|
||||
RUN apt-get update -yqq && \
|
||||
apt-get install -y zlib1g-dev libicu-dev g++ && \
|
||||
docker-php-ext-configure intl && \
|
||||
docker-php-ext-install intl
|
||||
|
||||
# install the ghostscript extension for PDF editing
|
||||
RUN apt-get update -yqq \
|
||||
&& apt-get install -y \
|
||||
poppler-utils \
|
||||
ghostscript
|
||||
|
||||
# LDAP:
|
||||
RUN apt-get update -yqq && \
|
||||
apt-get install -y libldap2-dev && \
|
||||
docker-php-ext-configure ldap --with-libdir=lib/x86_64-linux-gnu/ && \
|
||||
docker-php-ext-install ldap
|
||||
|
||||
RUN yes "" | pecl install msgpack-beta \
|
||||
&& echo "extension=msgpack.so" > /usr/local/etc/php/conf.d/ext-msgpack.ini
|
||||
|
||||
# compile igbinary extension
|
||||
RUN cd /tmp/ && git clone https://github.com/igbinary/igbinary "php-igbinary" && \
|
||||
cd php-igbinary && \
|
||||
phpize && \
|
||||
./configure && \
|
||||
make && \
|
||||
make install && \
|
||||
make clean && \
|
||||
docker-php-ext-enable igbinary
|
||||
|
||||
# curl extension
|
||||
RUN apt-get install -y curl libcurl4-openssl-dev --no-install-recommends && \
|
||||
docker-php-ext-install curl
|
||||
|
||||
# data structures extension
|
||||
RUN pecl install ds && \
|
||||
docker-php-ext-enable ds
|
||||
|
||||
# imagick
|
||||
RUN apt-get update && apt-get install -y libmagickwand-6.q16-dev --no-install-recommends && \
|
||||
ln -s /usr/lib/x86_64-linux-gnu/ImageMagick-6.8.9/bin-Q16/MagickWand-config /usr/bin && \
|
||||
pecl install imagick && \
|
||||
echo "extension=imagick.so" > /usr/local/etc/php/conf.d/ext-imagick.ini
|
||||
|
||||
# ssh2 module
|
||||
RUN apt-get install -y libssh2-1-dev && \
|
||||
pecl install ssh2-1.0 && \
|
||||
docker-php-ext-enable ssh2
|
||||
|
||||
# php-module: curl dom bz2 gd json mysqli pcntl pdo pdo_mysql phar posix
|
||||
RUN apt-get install -y libxml2-dev libbz2-dev re2c libpng++-dev \
|
||||
libjpeg-dev libvpx-dev zlib1g-dev libgd-dev \
|
||||
libtidy-dev libxslt1-dev libmagic-dev libexif-dev file \
|
||||
sqlite3 libsqlite3-dev libxslt-dev
|
||||
|
||||
RUN export CFLAGS="-I/usr/src/php" && \
|
||||
docker-php-ext-install xmlreader xmlwriter
|
||||
|
||||
RUN docker-php-ext-configure json && \
|
||||
docker-php-ext-configure session && \
|
||||
docker-php-ext-configure ctype && \
|
||||
docker-php-ext-configure tokenizer && \
|
||||
docker-php-ext-configure simplexml && \
|
||||
docker-php-ext-configure dom && \
|
||||
docker-php-ext-configure mbstring && \
|
||||
docker-php-ext-configure zip && \
|
||||
docker-php-ext-configure pdo && \
|
||||
docker-php-ext-configure pdo_sqlite && \
|
||||
docker-php-ext-configure pdo_mysql && \
|
||||
docker-php-ext-configure mysqli && \
|
||||
docker-php-ext-configure iconv && \
|
||||
docker-php-ext-configure xml && \
|
||||
docker-php-ext-configure phar
|
||||
|
||||
RUN docker-php-ext-install \
|
||||
dom \
|
||||
bz2 \
|
||||
json \
|
||||
pcntl \
|
||||
phar \
|
||||
posix \
|
||||
simplexml \
|
||||
soap \
|
||||
tidy \
|
||||
xml \
|
||||
xmlrpc \
|
||||
xsl \
|
||||
calendar \
|
||||
ctype \
|
||||
fileinfo \
|
||||
ftp \
|
||||
sysvmsg \
|
||||
sysvsem \
|
||||
sysvshm
|
||||
|
||||
# install the php memcache & memcached extension
|
||||
RUN set -x \
|
||||
&& apt-get update && apt-get install -y --no-install-recommends unzip libssl-dev libpcre3 libpcre3-dev \
|
||||
&& cd /tmp \
|
||||
&& curl -sSL -o php7.zip https://github.com/websupport-sk/pecl-memcache/archive/php7.zip \
|
||||
&& unzip php7 \
|
||||
&& cd pecl-memcache-php7 \
|
||||
&& /usr/local/bin/phpize \
|
||||
&& ./configure --with-php-config=/usr/local/bin/php-config \
|
||||
&& make \
|
||||
&& make install \
|
||||
&& echo "extension=memcache.so" > /usr/local/etc/php/conf.d/ext-memcache.ini \
|
||||
&& rm -rf /tmp/pecl-memcache-php7 php7.zip
|
||||
|
||||
RUN curl -L -o /tmp/memcached.tar.gz "https://github.com/php-memcached-dev/php-memcached/archive/php7.tar.gz" \
|
||||
&& mkdir -p memcached \
|
||||
&& tar -C memcached -zxvf /tmp/memcached.tar.gz --strip 1 \
|
||||
&& ( \
|
||||
cd memcached \
|
||||
&& phpize \
|
||||
&& ./configure \
|
||||
&& make -j$(nproc) \
|
||||
&& make install \
|
||||
) \
|
||||
&& rm -r memcached \
|
||||
&& rm /tmp/memcached.tar.gz \
|
||||
&& docker-php-ext-enable memcached
|
||||
|
||||
# mhash
|
||||
RUN apt-get install -y libmhash2 libmhash-dev libc-client-dev libkrb5-dev
|
||||
|
||||
RUN docker-php-ext-configure imap --with-kerberos --with-imap-ssl \
|
||||
&& docker-php-ext-install imap
|
||||
|
||||
RUN docker-php-ext-configure hash --with-mhash && \
|
||||
docker-php-ext-install hash
|
||||
|
||||
# Opcache
|
||||
RUN docker-php-ext-install opcache
|
||||
|
||||
# install APCu
|
||||
RUN pecl install apcu-5.1.8 && \
|
||||
pecl install apcu_bc-1.0.3 && \
|
||||
docker-php-ext-enable apcu --ini-name 10-docker-php-ext-apcu.ini && \
|
||||
docker-php-ext-enable apc --ini-name 20-docker-php-ext-apc.ini
|
||||
|
||||
# install MSSQL support
|
||||
# install ODBC driver
|
||||
RUN apt-get update -y && apt-get install -y apt-transport-https locales gnupg
|
||||
RUN curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add - && \
|
||||
curl https://packages.microsoft.com/config/debian/8/prod.list > /etc/apt/sources.list.d/mssql-release.list && \
|
||||
export DEBIAN_FRONTEND=noninteractive && apt-get update -y && \
|
||||
ACCEPT_EULA=Y apt-get install -y msodbcsql unixodbc-dev
|
||||
RUN set -xe \
|
||||
&& pecl install pdo_sqlsrv \
|
||||
&& docker-php-ext-enable pdo_sqlsrv \
|
||||
&& apt-get purge -y unixodbc-dev && apt-get autoremove -y && apt-get clean
|
||||
|
||||
# set locale to utf-8
|
||||
RUN echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && \
|
||||
locale-gen
|
||||
ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en' LC_ALL='en_US.UTF-8'
|
||||
|
||||
# geoip - DEPRECIATED: using provided by Nginx container
|
||||
# RUN runtimeRequirements="libgeoip-dev" \
|
||||
# && apt-get update && apt-get install -y ${runtimeRequirements} \
|
||||
# && pecl install geoip-1.1.1 \
|
||||
# && printf "extension=geoip.so\n[geoip]\ngeoip.custom_directory = /usr/share/GeoIP/\n" > /usr/local/etc/php/conf.d/ext-geoip.ini
|
||||
|
||||
# RUN mkdir -p /usr/share/GeoIP && cd /usr/share/GeoIP/ && \
|
||||
# rm -f GeoIP.dat GeoIPv6.dat && \
|
||||
# curl -L -O http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz && \
|
||||
# curl -L -O http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz && \
|
||||
# gzip -d * && \
|
||||
# mv GeoLiteCity.dat GeoIPCity.dat
|
||||
|
||||
#
|
||||
#--------------------------------------------------------------------------
|
||||
# Final Touches
|
||||
#--------------------------------------------------------------------------
|
||||
#
|
||||
|
||||
# install helpful libs
|
||||
RUN apt-get -y install libfcgi0ldbl nano cron
|
||||
|
||||
# crontab fix: https://stackoverflow.com/questions/43323754/cannot-make-remove-an-entry-for-the-specified-session-cron
|
||||
RUN sed -i '/session required pam_loginuid.so/c\#session required pam_loginuid.so' /etc/pam.d/cron
|
||||
|
||||
# expose /status for health check & stop access log
|
||||
RUN echo "pm.status_path = /status" >> /usr/local/etc/php/conf.d/zz-docker.conf && \
|
||||
echo "ping.path = /ping" >> /usr/local/etc/php/conf.d/zz-docker.conf && \
|
||||
echo "ping.response = OK" >> /usr/local/etc/php/conf.d/zz-docker.conf && \
|
||||
echo "access.log = /proc/self/fd/1" >> /usr/local/etc/php/conf.d/zz-docker.conf
|
||||
|
||||
# composer
|
||||
# consider removing to a separate container
|
||||
# RUN curl -sS https://getcomposer.org/installer | php && mv composer.phar /usr/local/bin/composer && chmod +x /usr/local/bin/composer
|
||||
# ENV PATH="$PATH:/root/.composer/vendor/bin"
|
||||
|
||||
# install modman
|
||||
# RUN curl -s -L https://raw.github.com/colinmollenhour/modman/master/modman-installer | bash && \
|
||||
# mv ~/bin/modman /usr/sbin/
|
||||
|
||||
# install NewRelic agent
|
||||
RUN echo 'deb http://apt.newrelic.com/debian/ newrelic non-free' | tee /etc/apt/sources.list.d/newrelic.list && \
|
||||
curl https://download.newrelic.com/548C16BF.gpg | apt-key add - && \
|
||||
apt-get -y update && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get -y install newrelic-php5 newrelic-sysmond && \
|
||||
export NR_INSTALL_SILENT=1 && newrelic-install install
|
||||
|
||||
# install blackfire.io profiler
|
||||
# RUN version=$(php -r "echo PHP_MAJOR_VERSION.PHP_MINOR_VERSION;") \
|
||||
# && curl -A "Docker" -o /tmp/blackfire-probe.tar.gz -D - -L -s https://blackfire.io/api/v1/releases/probe/php/linux/amd64/$version \
|
||||
# && tar zxpf /tmp/blackfire-probe.tar.gz -C /tmp \
|
||||
# && mv /tmp/blackfire-*.so $(php -r "echo ini_get('extension_dir');")/blackfire.so \
|
||||
# && printf "extension=blackfire.so\nblackfire.agent_socket=tcp://blackfire:8707\n" > $PHP_INI_DIR/conf.d/blackfire.ini
|
||||
|
||||
# install SendGrid
|
||||
RUN echo "postfix postfix/mailname string localhost" | debconf-set-selections && \
|
||||
echo "postfix postfix/main_mailer_type string 'Internet Site'" | debconf-set-selections && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install postfix libsasl2-modules -y
|
||||
|
||||
# install shared PHP code
|
||||
RUN git clone https://github.com/nrk/predis.git /usr/local/lib/php/predis && \
|
||||
git clone https://github.com/markhilton/redis-http-cache.git /usr/local/lib/php/redis-http-cache
|
||||
|
||||
# Set default work directory
|
||||
ADD scripts/* /usr/local/bin/
|
||||
RUN chmod +x /usr/local/bin/*
|
||||
|
||||
# install aliases
|
||||
RUN echo "" >> ~/.bashrc && \
|
||||
echo "# Load Custom Aliases" >> ~/.bashrc && \
|
||||
echo "source /usr/local/bin/aliases.sh" >> ~/.bashrc && \
|
||||
echo "" >> ~/.bashrc && \
|
||||
sed -i 's/\r//' /usr/local/bin/aliases.sh && \
|
||||
sed -i 's/^#! \/bin\/sh/#! \/bin\/bash/' /usr/local/bin/aliases.sh
|
||||
|
||||
# Clean up
|
||||
RUN apt-get autoremove -y && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
||||
|
||||
# Health check
|
||||
HEALTHCHECK --interval=5s --timeout=3s \
|
||||
CMD SCRIPT_NAME=/status SCRIPT_FILENAME=/status REQUEST_METHOD=GET cgi-fcgi -bind -connect 127.0.0.1:9000 || exit 1
|
||||
|
||||
EXPOSE 9000
|
||||
WORKDIR /app
|
||||
|
||||
CMD ["php-fpm"]
|
||||
@@ -0,0 +1,22 @@
|
||||
version: '3'
|
||||
|
||||
services:
|
||||
|
||||
php70:
|
||||
image: crunchgeek/php-fpm:7.0.r1
|
||||
restart: always
|
||||
hostname: php70
|
||||
container_name: php70
|
||||
environment:
|
||||
- ENDPOINT=${ENDPOINT}
|
||||
- FILESYSTEM=${FILESYSTEM}
|
||||
- APPLICATIONS=${APPLICATIONS}
|
||||
- NEWRELIC_LICENSE=${NEWRELIC_LICENSE}
|
||||
- SMTP_LOGIN=${SMTP_LOGIN}
|
||||
- SMTP_PASSWORD=${SMTP_PASSWORD}
|
||||
volumes:
|
||||
- ${APPLICATIONS}:/applications
|
||||
- configurations:/usr/local/etc/sites/
|
||||
|
||||
volumes:
|
||||
configurations:
|
||||
@@ -0,0 +1,144 @@
|
||||
#! /bin/bash
|
||||
|
||||
# Colors used for status updates
|
||||
ESC_SEQ="\x1b["
|
||||
COL_RESET=$ESC_SEQ"39;49;00m"
|
||||
COL_RED=$ESC_SEQ"31;01m"
|
||||
COL_GREEN=$ESC_SEQ"32;01m"
|
||||
COL_YELLOW=$ESC_SEQ"33;01m"
|
||||
COL_BLUE=$ESC_SEQ"34;01m"
|
||||
COL_MAGENTA=$ESC_SEQ"35;01m"
|
||||
COL_CYAN=$ESC_SEQ"36;01m"
|
||||
|
||||
# Detect which `ls` flavor is in use
|
||||
if ls --color > /dev/null 2>&1; then # GNU `ls`
|
||||
colorflag="--color"
|
||||
export LS_COLORS='no=00:fi=00:di=01;31:ln=01;36:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.gz=01;31:*.bz2=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.avi=01;35:*.fli=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.ogg=01;35:*.mp3=01;35:*.wav=01;35:'
|
||||
else # macOS `ls`
|
||||
colorflag="-G"
|
||||
export LSCOLORS='BxBxhxDxfxhxhxhxhxcxcx'
|
||||
fi
|
||||
|
||||
# List all files colorized in long format
|
||||
#alias l="ls -lF ${colorflag}"
|
||||
### MEGA: I want l and la ti return hisdden files
|
||||
alias l="ls -laF ${colorflag}"
|
||||
|
||||
# List all files colorized in long format, including dot files
|
||||
alias la="ls -laF ${colorflag}"
|
||||
|
||||
# List only directories
|
||||
alias lsd="ls -lF ${colorflag} | grep --color=never '^d'"
|
||||
|
||||
# Always use color output for `ls`
|
||||
alias ls="command ls ${colorflag}"
|
||||
|
||||
# Commonly Used Aliases
|
||||
alias ..="cd .."
|
||||
alias ...="cd ../.."
|
||||
alias ....="cd ../../.."
|
||||
alias .....="cd ../../../.."
|
||||
alias ~="cd ~" # `cd` is probably faster to type though
|
||||
alias -- -="cd -"
|
||||
alias home="cd ~"
|
||||
|
||||
alias h="history"
|
||||
alias j="jobs"
|
||||
alias e='exit'
|
||||
alias c="clear"
|
||||
alias cla="clear && ls -l"
|
||||
alias cll="clear && ls -la"
|
||||
alias cls="clear && ls"
|
||||
alias code="cd /var/www"
|
||||
alias ea="vi ~/aliases"
|
||||
|
||||
# Always enable colored `grep` output
|
||||
# Note: `GREP_OPTIONS="--color=auto"` is deprecated, hence the alias usage.
|
||||
alias grep='grep --color=auto'
|
||||
alias fgrep='fgrep --color=auto'
|
||||
alias egrep='egrep --color=auto'
|
||||
|
||||
alias art="php artisan"
|
||||
alias artisan="php artisan"
|
||||
alias cdump="composer dump-autoload -o"
|
||||
alias composer:dump="composer dump-autoload -o"
|
||||
alias db:reset="php artisan migrate:reset && php artisan migrate --seed"
|
||||
alias dusk="php artisan dusk"
|
||||
alias fresh="php artisan migrate:fresh"
|
||||
alias migrate="php artisan migrate"
|
||||
alias refresh="php artisan migrate:refresh"
|
||||
alias rollback="php artisan migrate:rollback"
|
||||
alias seed="php artisan:seed"
|
||||
alias serve="php artisan serve --quiet &"
|
||||
|
||||
alias phpunit="./vendor/bin/phpunit"
|
||||
alias pu="phpunit"
|
||||
alias puf="phpunit --filter"
|
||||
alias pud='phpunit --debug'
|
||||
|
||||
alias cc='codecept'
|
||||
alias ccb='codecept build'
|
||||
alias ccr='codecept run'
|
||||
alias ccu='codecept run unit'
|
||||
alias ccf='codecept run functional'
|
||||
|
||||
alias g="gulp"
|
||||
alias npm-global="npm list -g --depth 0"
|
||||
alias ra="reload"
|
||||
alias reload="source ~/.aliases && echo \"$COL_GREEN ==> Aliases Reloaded... $COL_RESET \n \""
|
||||
alias run="npm run"
|
||||
alias tree="xtree"
|
||||
|
||||
# Xvfb
|
||||
alias xvfb="Xvfb -ac :0 -screen 0 1024x768x16 &"
|
||||
|
||||
# requires installation of 'https://www.npmjs.com/package/npms-cli'
|
||||
alias npms="npms search"
|
||||
# requires installation of 'https://www.npmjs.com/package/package-menu-cli'
|
||||
alias pm="package-menu"
|
||||
# requires installation of 'https://www.npmjs.com/package/pkg-version-cli'
|
||||
alias pv="package-version"
|
||||
# requires installation of 'https://github.com/sindresorhus/latest-version-cli'
|
||||
alias lv="latest-version"
|
||||
|
||||
# git aliases
|
||||
alias gaa="git add ."
|
||||
alias gd="git --no-pager diff"
|
||||
alias git-revert="git reset --hard && git clean -df"
|
||||
alias gs="git status"
|
||||
alias whoops="git reset --hard && git clean -df"
|
||||
|
||||
# Create a new directory and enter it
|
||||
function mkd() {
|
||||
mkdir -p "$@" && cd "$@"
|
||||
}
|
||||
|
||||
function md() {
|
||||
mkdir -p "$@" && cd "$@"
|
||||
}
|
||||
|
||||
function xtree {
|
||||
find ${1:-.} -print | sed -e 's;[^/]*/;|____;g;s;____|; |;g'
|
||||
}
|
||||
|
||||
# `tre` is a shorthand for `tree` with hidden files and color enabled, ignoring
|
||||
# the `.git` directory, listing directories first. The output gets piped into
|
||||
# `less` with options to preserve color and line numbers, unless the output is
|
||||
# small enough for one screen.
|
||||
function tre() {
|
||||
tree -aC -I '.git|node_modules|bower_components' --dirsfirst "$@" | less -FRNX;
|
||||
}
|
||||
|
||||
# Determine size of a file or total size of a directory
|
||||
function fs() {
|
||||
if du -b /dev/null > /dev/null 2>&1; then
|
||||
local arg=-sbh;
|
||||
else
|
||||
local arg=-sh;
|
||||
fi
|
||||
if [[ -n "$@" ]]; then
|
||||
du $arg -- "$@";
|
||||
else
|
||||
du $arg .[^.]* ./*;
|
||||
fi;
|
||||
}
|
||||
@@ -0,0 +1,17 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${PHP_CRONTABS_PATH+x} ] && [ "$PHP_CRONTABS_PATH" != "" ]; then
|
||||
printf "env CRONTABS_PATH: setting up crontabs: ";
|
||||
|
||||
for f in ${PHP_CRONTABS_PATH}; do
|
||||
printf "$f, ";
|
||||
rm -f /etc/cron.d/${f##*/}
|
||||
cp $f /etc/cron.d/
|
||||
chmod 0644 /etc/cron.d/${f##*/}
|
||||
done
|
||||
|
||||
echo
|
||||
printenv | grep -v "no_proxy" >> /etc/environment
|
||||
|
||||
/etc/init.d/cron start > /dev/null
|
||||
fi
|
||||
@@ -0,0 +1,62 @@
|
||||
#!/bin/bash
|
||||
|
||||
/usr/local/bin/php -v
|
||||
|
||||
### create system user for php pool
|
||||
if [ ! -z ${PHP_USER+x} ] && [ ! -z ${PHP_UID+x} ] && [ ! -z ${PHP_GID+x} ] && [ ! -z ${PHP_HOME+x} ] && [ "$PHP_USER" != "" ] && [ "$PHP_UID" != "" ] && [ "$PHP_GID" != "" ] && [ "$PHP_HOME" != "" ]; then
|
||||
echo "env PHP_USER: creating new system user: ${PHP_USER} ${PHP_UID}:${PHP_GID} ${PHP_HOME}"
|
||||
groupadd -f $PHP_USER -g $PHP_GID && \
|
||||
useradd -d $PHP_HOME -u $PHP_UID -g $PHP_GID -s /bin/false $PHP_USER
|
||||
fi
|
||||
|
||||
### load PHP ini configurations
|
||||
if [ ! -z ${PHP_INI_PATH+x} ] && [ "$PHP_INI_PATH" != "" ]; then
|
||||
printf "env PHP_INI_PATH: "
|
||||
for f in ${PHP_INI_PATH}; do
|
||||
printf "$f, ";
|
||||
rm -f /usr/local/etc/php/conf.d/${f##*/}
|
||||
cp $f /usr/local/etc/php/conf.d/
|
||||
done
|
||||
echo
|
||||
fi
|
||||
|
||||
### make sure to create clean php-fpm.conf
|
||||
### to avoid adding multiple times the same lines next
|
||||
### in case container is restarting
|
||||
echo "[global]" > /usr/local/etc/php-fpm.conf
|
||||
echo "include=etc/php-fpm.d/*.conf" >> /usr/local/etc/php-fpm.conf
|
||||
|
||||
### remove default www.conf pool
|
||||
### and load PHP-FPM pool configurations
|
||||
if [ ! -z ${PHP_POOL_PATH+x} ] && [ "$PHP_POOL_PATH" != "" ]; then
|
||||
|
||||
printf "env PHP_POOL_PATH: "
|
||||
for f in ${PHP_POOL_PATH}; do
|
||||
printf "$f, ";
|
||||
rm -f /usr/local/etc/php-fpm.d/${f##*/}
|
||||
cp $f /usr/local/etc/php-fpm.d/
|
||||
done
|
||||
echo
|
||||
fi
|
||||
|
||||
|
||||
### load boot bash scripts
|
||||
for f in /usr/local/bin/*.sh; do
|
||||
/bin/bash -c $f
|
||||
done
|
||||
|
||||
|
||||
### load bash scripts
|
||||
if [ ! -z ${PHP_BOOT_SCRIPTS+x} ] && [ "$PHP_BOOT_SCRIPTS" != "" ]; then
|
||||
printf "env PHP_BOOT_SCRIPTS: "
|
||||
for f in ${PHP_BOOT_SCRIPTS}; do
|
||||
printf "$f, ";
|
||||
|
||||
rm -f /usr/local/bin/${f##*/}
|
||||
cp $f /usr/local/bin/
|
||||
|
||||
chmod +x /usr/local/bin/${f##*/}
|
||||
/bin/bash -c /usr/local/bin/${f##*/}
|
||||
done
|
||||
echo
|
||||
fi
|
||||
@@ -0,0 +1,11 @@
|
||||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
/usr/local/bin/docker-boot
|
||||
|
||||
# first arg is `-f` or `--some-option`
|
||||
if [ "${1#-}" != "$1" ]; then
|
||||
set -- php-fpm "$@"
|
||||
fi
|
||||
|
||||
exec "$@"
|
||||
@@ -0,0 +1,8 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${NEWRELIC_LICENSE+x} ] && [ "$NEWRELIC_LICENSE" != "" ] ; then
|
||||
echo "env NEWRELIC_LICENSE: setting up newrelic license"
|
||||
sed -i "s/REPLACE_WITH_REAL_KEY/$NEWRELIC_LICENSE/g" /usr/local/etc/php/conf.d/newrelic.ini
|
||||
nrsysmond-config --set license_key=$NEWRELIC_LICENSE
|
||||
service newrelic-sysmond start > /dev/null
|
||||
fi
|
||||
@@ -0,0 +1,39 @@
|
||||
#!/usr/local/bin/php
|
||||
<?php
|
||||
|
||||
/**
|
||||
* This script is a sendmail wrapper for php to log calls of the php mail() function.
|
||||
* Author: Till Brehm, www.ispconfig.org
|
||||
* (Hopefully) secured by David Goodwin <david @ _palepurple_.co.uk>
|
||||
* https://www.howtoforge.com/how-to-log-emails-sent-with-phps-mail-function-to-detect-form-spam
|
||||
*/
|
||||
|
||||
$sendmail_bin = '/usr/sbin/sendmail';
|
||||
|
||||
// Get the email content
|
||||
$mail = '';
|
||||
$logline = '';
|
||||
$pointer = fopen('php://stdin', 'r');
|
||||
|
||||
while ($line = fgets($pointer)) {
|
||||
if (preg_match('/^to:/i', $line) || preg_match('/^from:/i', $line)) {
|
||||
$logline .= trim($line) . ' ';
|
||||
}
|
||||
$mail .= $line;
|
||||
}
|
||||
|
||||
// Compose the sendmail command
|
||||
$command = 'echo ' . escapeshellarg($mail) . ' | ' . $sendmail_bin . ' -t -i';
|
||||
|
||||
if (isset($_SERVER['argc'])) {
|
||||
for ($i = 1; $i < $_SERVER['argc']; $i++) {
|
||||
$command .= escapeshellarg($_SERVER['argv'][$i]) . ' ';
|
||||
}
|
||||
}
|
||||
|
||||
// Write the log
|
||||
$stdout = fopen('php://stdout', 'w');
|
||||
fwrite($stdout, (isset($_ENV['USER']) ? $_ENV['USER'] . ' ' : '') . $logline . ' - ' . $command . "\n");
|
||||
|
||||
// Execute the command
|
||||
return shell_exec($command);
|
||||
@@ -0,0 +1,24 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${SMTP_LOGIN+x} ] && [ ! -z ${SMTP_PASSWORD+x} ] && [ "$SMTP_LOGIN" != "" ] && [ "$SMTP_PASSWORD" != "" ]; then
|
||||
echo "env SMTP_LOGIN: sendgrid credentials for email routing";
|
||||
echo "[smtp.sendgrid.net]:2525 ${SMTP_LOGIN}:${SMTP_PASSWORD}" >> /etc/postfix/sasl_passwd
|
||||
|
||||
postmap /etc/postfix/sasl_passwd
|
||||
chmod 600 /etc/postfix/sasl_passwd.db
|
||||
rm /etc/postfix/sasl_passwd
|
||||
|
||||
### update email relay configuration for SendGrid
|
||||
sed -i 's/default_transport = error//g' /etc/postfix/main.cf && \
|
||||
sed -i 's/relay_transport = error//g' /etc/postfix/main.cf && \
|
||||
sed -i 's/relayhost = //g' /etc/postfix/main.cf && \
|
||||
|
||||
echo "relayhost = [smtp.sendgrid.net]:2525" >> /etc/postfix/main.cf && \
|
||||
echo "smtp_tls_security_level = encrypt" >> /etc/postfix/main.cf && \
|
||||
echo "smtp_sasl_auth_enable = yes" >> /etc/postfix/main.cf && \
|
||||
echo "smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd" >> /etc/postfix/main.cf && \
|
||||
echo "header_size_limit = 4096000" >> /etc/postfix/main.cf && \
|
||||
echo "smtp_sasl_security_options = noanonymous" >> /etc/postfix/main.cf
|
||||
|
||||
/etc/init.d/postfix start > /dev/null
|
||||
fi
|
||||
@@ -0,0 +1,8 @@
|
||||
#!/bin/bash
|
||||
|
||||
### update PHP session handler
|
||||
if [ ! -z ${PHP_SESSION_HANDLER+x} ] && [ ! -z ${PHP_SESSION_PATH+x} ] && [ "$PHP_SESSION_HANDLER" != "" ] && [ "$PHP_SESSION_PATH" != "" ]; then
|
||||
echo "env PHP_SESSION_HANDLER: updating php session handler [ $PHP_SESSION_PATH ]"
|
||||
echo "session.save_handler = $PHP_SESSION_HANDLER" > /usr/local/etc/php/conf.d/zz-session.ini
|
||||
echo "session.save_path = \"$PHP_SESSION_PATH\"" >> /usr/local/etc/php/conf.d/zz-session.ini
|
||||
fi
|
||||
@@ -0,0 +1,16 @@
|
||||
PHP_UID=1000
|
||||
PHP_GID=1000
|
||||
PHP_HOME=/app
|
||||
PHP_USER=php-fpm
|
||||
# PHP_INI_SCAN_DIR=/cfgs:/usr/local/etc/php/conf.d
|
||||
PHP_INI_PATH=/cfgs/php.ini
|
||||
PHP_POOL_PATH=/cfgs/*/*-pool.conf
|
||||
PHP_BOOT_SCRIPTS=/cfgs/start.sh
|
||||
PHP_CRONTABS_PATH=/cfgs/cron
|
||||
PHP_SESSION_HANDLER=redis
|
||||
PHP_SESSION_PATH=tcp://redis.host:6379
|
||||
|
||||
# private
|
||||
TEST_EMAIL=name@domain.com
|
||||
NEWRELIC_LICENSE=newrelic_license
|
||||
SENDGRID_API_KEY=sendgrid_api_key
|
||||
@@ -0,0 +1,2 @@
|
||||
.env
|
||||
test/
|
||||
@@ -0,0 +1,171 @@
|
||||
FROM php:7.2-fpm
|
||||
|
||||
RUN apt-get update && \
|
||||
apt-get install -y --no-install-recommends \
|
||||
git \
|
||||
libmemcached-dev \
|
||||
libz-dev \
|
||||
libpq-dev \
|
||||
libssl-dev libssl-doc libsasl2-dev \
|
||||
libmcrypt-dev \
|
||||
libxml2-dev \
|
||||
zlib1g-dev libicu-dev g++ \
|
||||
libldap2-dev libbz2-dev \
|
||||
curl libcurl4-openssl-dev \
|
||||
libenchant-dev libgmp-dev firebird-dev libib-util \
|
||||
re2c libpng++-dev \
|
||||
libwebp-dev libjpeg-dev libjpeg62-turbo-dev libpng-dev libxpm-dev libvpx-dev libfreetype6-dev \
|
||||
libmagick++-dev \
|
||||
libmagickwand-dev \
|
||||
zlib1g-dev libgd-dev \
|
||||
libtidy-dev libxslt1-dev libmagic-dev libexif-dev file \
|
||||
sqlite3 libsqlite3-dev libxslt-dev \
|
||||
libmhash2 libmhash-dev libc-client-dev libkrb5-dev libssh2-1-dev \
|
||||
unzip libpcre3 libpcre3-dev \
|
||||
poppler-utils ghostscript libmagickwand-6.q16-dev libsnmp-dev libedit-dev libreadline6-dev libsodium-dev \
|
||||
freetds-bin freetds-dev freetds-common libct4 libsybdb5 tdsodbc libreadline-dev librecode-dev libpspell-dev
|
||||
|
||||
# fix for docker-php-ext-install pdo_dblib
|
||||
# https://stackoverflow.com/questions/43617752/docker-php-and-freetds-cannot-find-freetds-in-know-installation-directories
|
||||
RUN ln -s /usr/lib/x86_64-linux-gnu/libsybdb.so /usr/lib/
|
||||
|
||||
RUN docker-php-ext-configure hash --with-mhash && \
|
||||
docker-php-ext-install hash
|
||||
RUN docker-php-ext-configure imap --with-kerberos --with-imap-ssl && \
|
||||
docker-php-ext-install imap iconv
|
||||
|
||||
RUN docker-php-ext-install bcmath bz2 calendar ctype curl dba dom enchant
|
||||
RUN docker-php-ext-install fileinfo exif ftp gd gettext gmp
|
||||
RUN docker-php-ext-install interbase intl json ldap mbstring mysqli
|
||||
RUN docker-php-ext-install opcache pcntl pspell
|
||||
RUN docker-php-ext-install pdo pdo_dblib pdo_mysql pdo_pgsql pdo_sqlite pgsql phar posix
|
||||
RUN docker-php-ext-install readline recode
|
||||
RUN docker-php-ext-install session shmop simplexml soap sockets sodium
|
||||
RUN docker-php-ext-install sysvmsg sysvsem sysvshm
|
||||
# RUN docker-php-ext-install snmp
|
||||
|
||||
# fix for docker-php-ext-install xmlreader
|
||||
# https://github.com/docker-library/php/issues/373
|
||||
RUN export CFLAGS="-I/usr/src/php" && docker-php-ext-install xmlreader xmlwriter xml xmlrpc xsl
|
||||
|
||||
RUN docker-php-ext-install tidy tokenizer wddx zend_test zip
|
||||
|
||||
# already build in... what they say...
|
||||
# RUN docker-php-ext-install filter reflection spl standard
|
||||
# RUN docker-php-ext-install pdo_firebird pdo_oci
|
||||
|
||||
# install pecl extension
|
||||
RUN pecl install ds-1.3.0 && \
|
||||
pecl install imagick && \
|
||||
pecl install igbinary && \
|
||||
pecl install ssh2-1.0 && \
|
||||
pecl install redis-4.0.1 && \
|
||||
pecl install memcached-3.0.4 && \
|
||||
docker-php-ext-enable ds imagick igbinary ssh2 redis memcached
|
||||
|
||||
# install pecl extension
|
||||
RUN pecl install mongodb && docker-php-ext-enable mongodb
|
||||
|
||||
RUN yes "" | pecl install msgpack && \
|
||||
docker-php-ext-enable msgpack
|
||||
|
||||
# install the php memcache extension
|
||||
RUN set -x \
|
||||
&& cd /tmp \
|
||||
&& curl -sSL -o php7.zip https://github.com/websupport-sk/pecl-memcache/archive/php7.zip \
|
||||
&& unzip php7 \
|
||||
&& cd pecl-memcache-php7 \
|
||||
&& /usr/local/bin/phpize \
|
||||
&& ./configure --with-php-config=/usr/local/bin/php-config \
|
||||
&& make \
|
||||
&& make install \
|
||||
&& echo "extension=memcache.so" > /usr/local/etc/php/conf.d/docker-php-ext-memcache.ini \
|
||||
&& rm -rf /tmp/pecl-memcache-php7 php7.zip
|
||||
|
||||
# install APCu
|
||||
RUN pecl install apcu-5.1.8 && \
|
||||
pecl install apcu_bc-1.0.3 && \
|
||||
docker-php-ext-enable apcu --ini-name docker-php-ext-10-apcu.ini && \
|
||||
docker-php-ext-enable apc --ini-name docker-php-ext-20-apc.ini
|
||||
|
||||
# oracle database
|
||||
# RUN curl -o /tmp/instantclient-sdk.zip -L https://github.com/bumpx/oracle-instantclient/raw/master/instantclient-sdk-linux.x64-12.1.0.2.0.zip && \
|
||||
# curl -o /tmp/instantclient-basic.zip -L https://github.com/bumpx/oracle-instantclient/raw/master/instantclient-basic-linux.x64-12.1.0.2.0.zip
|
||||
# RUN unzip /tmp/instantclient-basic.zip -d /usr/local/ && \
|
||||
# unzip /tmp/instantclient-sdk.zip -d /usr/local/ && \
|
||||
# ln -s /usr/local/instantclient_12_1 /usr/local/instantclient && \
|
||||
# ln -s /usr/local/instantclient/libclntsh.so.12.1 /usr/local/instantclient/libclntsh.so && \
|
||||
# docker-php-ext-configure oci8 --with-oci8=instantclient,/usr/local/instantclient && \
|
||||
# docker-php-ext-install oci8
|
||||
|
||||
RUN apt-get update -y && apt-get install -y apt-transport-https locales gnupg
|
||||
|
||||
# install MSSQL support and ODBC driver
|
||||
# RUN curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add - && \
|
||||
# curl https://packages.microsoft.com/config/debian/8/prod.list > /etc/apt/sources.list.d/mssql-release.list && \
|
||||
# export DEBIAN_FRONTEND=noninteractive && apt-get update -y && \
|
||||
# ACCEPT_EULA=Y apt-get install -y msodbcsql unixodbc-dev
|
||||
# RUN set -xe \
|
||||
# && pecl install pdo_sqlsrv \
|
||||
# && docker-php-ext-enable pdo_sqlsrv \
|
||||
# && apt-get purge -y unixodbc-dev && apt-get autoremove -y && apt-get clean
|
||||
|
||||
# install GD
|
||||
RUN docker-php-ext-configure gd \
|
||||
--with-gd \
|
||||
--with-webp-dir \
|
||||
--with-jpeg-dir \
|
||||
--with-png-dir \
|
||||
--with-zlib-dir \
|
||||
--with-xpm-dir \
|
||||
--with-freetype-dir && \
|
||||
docker-php-ext-install gd
|
||||
|
||||
# set locale to utf-8
|
||||
RUN echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && locale-gen
|
||||
ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en' LC_ALL='en_US.UTF-8'
|
||||
|
||||
#RUN pecl install stackdriver_debugger-alpha \
|
||||
# && echo "extension=stackdriver_debugger.so" > /usr/local/etc/php/conf.d/docker-php-ext-stackdriver_debugger.ini
|
||||
|
||||
# install xdebug
|
||||
RUN pecl install xdebug && docker-php-ext-enable xdebug
|
||||
|
||||
#--------------------------------------------------------------------------
|
||||
# Final Touches
|
||||
#--------------------------------------------------------------------------
|
||||
|
||||
# install required libs for health check
|
||||
RUN apt-get -y install libfcgi0ldbl nano htop iotop lsof cron mariadb-client redis-tools
|
||||
|
||||
# install composer
|
||||
RUN php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" \
|
||||
&& php -r "if (hash_file('sha384', 'composer-setup.php') === '55ce33d7678c5a611085589f1f3ddf8b3c52d662cd01d4ba75c0ee0459970c2200a51f492d557530c71c15d8dba01eae') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" \
|
||||
&& php composer-setup.php \
|
||||
&& php -r "unlink('composer-setup.php');" \
|
||||
&& mv composer.phar /usr/local/sbin/composer \
|
||||
&& chmod +x /usr/local/sbin/composer
|
||||
|
||||
# install NewRelic agent
|
||||
RUN echo 'deb http://apt.newrelic.com/debian/ newrelic non-free' | tee /etc/apt/sources.list.d/newrelic.list && \
|
||||
curl https://download.newrelic.com/548C16BF.gpg | apt-key add - && \
|
||||
apt-get -y update && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get -y install newrelic-php5 newrelic-sysmond && \
|
||||
export NR_INSTALL_SILENT=1 && newrelic-install install
|
||||
|
||||
# install SendGrid
|
||||
RUN echo "postfix postfix/mailname string localhost" | debconf-set-selections && \
|
||||
echo "postfix postfix/main_mailer_type string 'Internet Site'" | debconf-set-selections && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install postfix libsasl2-modules -y
|
||||
|
||||
# Set default work directory
|
||||
ADD scripts/* /usr/local/bin/
|
||||
RUN chmod +x /usr/local/bin/*
|
||||
|
||||
# Health check
|
||||
RUN echo '#!/bin/bash' > /healthcheck && \
|
||||
echo 'SCRIPT_NAME=/health SCRIPT_FILENAME=/health REQUEST_METHOD=GET cgi-fcgi -bind -connect 127.0.0.1:9000 || exit 1' >> /healthcheck && \
|
||||
chmod +x /healthcheck
|
||||
|
||||
# Clean up
|
||||
RUN apt-get remove -y git && apt-get autoremove -y && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,423 @@
|
||||
; Start a new pool named 'www'.
|
||||
; the variable $pool can be used in any directive and will be replaced by the
|
||||
; pool name ('www' here)
|
||||
[www]
|
||||
|
||||
; Per pool prefix
|
||||
; It only applies on the following directives:
|
||||
; - 'access.log'
|
||||
; - 'slowlog'
|
||||
; - 'listen' (unixsocket)
|
||||
; - 'chroot'
|
||||
; - 'chdir'
|
||||
; - 'php_values'
|
||||
; - 'php_admin_values'
|
||||
; When not set, the global prefix (or NONE) applies instead.
|
||||
; Note: This directive can also be relative to the global prefix.
|
||||
; Default Value: none
|
||||
;prefix = /path/to/pools/$pool
|
||||
|
||||
; Unix user/group of processes
|
||||
; Note: The user is mandatory. If the group is not set, the default user's group
|
||||
; will be used.
|
||||
user = www-data
|
||||
group = www-data
|
||||
|
||||
; The address on which to accept FastCGI requests.
|
||||
; Valid syntaxes are:
|
||||
; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on
|
||||
; a specific port;
|
||||
; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
|
||||
; a specific port;
|
||||
; 'port' - to listen on a TCP socket to all addresses
|
||||
; (IPv6 and IPv4-mapped) on a specific port;
|
||||
; '/path/to/unix/socket' - to listen on a unix socket.
|
||||
; Note: This value is mandatory.
|
||||
listen = 9000
|
||||
|
||||
; Set listen(2) backlog.
|
||||
; Default Value: 511 (-1 on FreeBSD and OpenBSD)
|
||||
;listen.backlog = 511
|
||||
|
||||
; Set permissions for unix socket, if one is used. In Linux, read/write
|
||||
; permissions must be set in order to allow connections from a web server. Many
|
||||
; BSD-derived systems allow connections regardless of permissions.
|
||||
; Default Values: user and group are set as the running user
|
||||
; mode is set to 0660
|
||||
;listen.owner = www-data
|
||||
;listen.group = www-data
|
||||
;listen.mode = 0660
|
||||
; When POSIX Access Control Lists are supported you can set them using
|
||||
; these options, value is a comma separated list of user/group names.
|
||||
; When set, listen.owner and listen.group are ignored
|
||||
;listen.acl_users =
|
||||
;listen.acl_groups =
|
||||
|
||||
; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
|
||||
; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
|
||||
; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
|
||||
; must be separated by a comma. If this value is left blank, connections will be
|
||||
; accepted from any ip address.
|
||||
; Default Value: any
|
||||
;listen.allowed_clients = 127.0.0.1
|
||||
|
||||
; Specify the nice(2) priority to apply to the pool processes (only if set)
|
||||
; The value can vary from -19 (highest priority) to 20 (lower priority)
|
||||
; Note: - It will only work if the FPM master process is launched as root
|
||||
; - The pool processes will inherit the master process priority
|
||||
; unless it specified otherwise
|
||||
; Default Value: no set
|
||||
; process.priority = -19
|
||||
|
||||
; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
|
||||
; or group is differrent than the master process user. It allows to create process
|
||||
; core dump and ptrace the process for the pool user.
|
||||
; Default Value: no
|
||||
; process.dumpable = yes
|
||||
|
||||
; Choose how the process manager will control the number of child processes.
|
||||
; Possible Values:
|
||||
; static - a fixed number (pm.max_children) of child processes;
|
||||
; dynamic - the number of child processes are set dynamically based on the
|
||||
; following directives. With this process management, there will be
|
||||
; always at least 1 children.
|
||||
; pm.max_children - the maximum number of children that can
|
||||
; be alive at the same time.
|
||||
; pm.start_servers - the number of children created on startup.
|
||||
; pm.min_spare_servers - the minimum number of children in 'idle'
|
||||
; state (waiting to process). If the number
|
||||
; of 'idle' processes is less than this
|
||||
; number then some children will be created.
|
||||
; pm.max_spare_servers - the maximum number of children in 'idle'
|
||||
; state (waiting to process). If the number
|
||||
; of 'idle' processes is greater than this
|
||||
; number then some children will be killed.
|
||||
; ondemand - no children are created at startup. Children will be forked when
|
||||
; new requests will connect. The following parameter are used:
|
||||
; pm.max_children - the maximum number of children that
|
||||
; can be alive at the same time.
|
||||
; pm.process_idle_timeout - The number of seconds after which
|
||||
; an idle process will be killed.
|
||||
; Note: This value is mandatory.
|
||||
pm = dynamic
|
||||
|
||||
; The number of child processes to be created when pm is set to 'static' and the
|
||||
; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
|
||||
; This value sets the limit on the number of simultaneous requests that will be
|
||||
; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
|
||||
; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
|
||||
; CGI. The below defaults are based on a server without much resources. Don't
|
||||
; forget to tweak pm.* to fit your needs.
|
||||
; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
|
||||
; Note: This value is mandatory.
|
||||
pm.max_children = 5
|
||||
|
||||
; The number of child processes created on startup.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
|
||||
pm.start_servers = 2
|
||||
|
||||
; The desired minimum number of idle server processes.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Note: Mandatory when pm is set to 'dynamic'
|
||||
pm.min_spare_servers = 1
|
||||
|
||||
; The desired maximum number of idle server processes.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Note: Mandatory when pm is set to 'dynamic'
|
||||
pm.max_spare_servers = 3
|
||||
|
||||
; The number of seconds after which an idle process will be killed.
|
||||
; Note: Used only when pm is set to 'ondemand'
|
||||
; Default Value: 10s
|
||||
;pm.process_idle_timeout = 10s;
|
||||
|
||||
; The number of requests each child process should execute before respawning.
|
||||
; This can be useful to work around memory leaks in 3rd party libraries. For
|
||||
; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
|
||||
; Default Value: 0
|
||||
;pm.max_requests = 500
|
||||
|
||||
; The URI to view the FPM status page. If this value is not set, no URI will be
|
||||
; recognized as a status page. It shows the following informations:
|
||||
; pool - the name of the pool;
|
||||
; process manager - static, dynamic or ondemand;
|
||||
; start time - the date and time FPM has started;
|
||||
; start since - number of seconds since FPM has started;
|
||||
; accepted conn - the number of request accepted by the pool;
|
||||
; listen queue - the number of request in the queue of pending
|
||||
; connections (see backlog in listen(2));
|
||||
; max listen queue - the maximum number of requests in the queue
|
||||
; of pending connections since FPM has started;
|
||||
; listen queue len - the size of the socket queue of pending connections;
|
||||
; idle processes - the number of idle processes;
|
||||
; active processes - the number of active processes;
|
||||
; total processes - the number of idle + active processes;
|
||||
; max active processes - the maximum number of active processes since FPM
|
||||
; has started;
|
||||
; max children reached - number of times, the process limit has been reached,
|
||||
; when pm tries to start more children (works only for
|
||||
; pm 'dynamic' and 'ondemand');
|
||||
; Value are updated in real time.
|
||||
; Example output:
|
||||
; pool: www
|
||||
; process manager: static
|
||||
; start time: 01/Jul/2011:17:53:49 +0200
|
||||
; start since: 62636
|
||||
; accepted conn: 190460
|
||||
; listen queue: 0
|
||||
; max listen queue: 1
|
||||
; listen queue len: 42
|
||||
; idle processes: 4
|
||||
; active processes: 11
|
||||
; total processes: 15
|
||||
; max active processes: 12
|
||||
; max children reached: 0
|
||||
;
|
||||
; By default the status page output is formatted as text/plain. Passing either
|
||||
; 'html', 'xml' or 'json' in the query string will return the corresponding
|
||||
; output syntax. Example:
|
||||
; http://www.foo.bar/status
|
||||
; http://www.foo.bar/status?json
|
||||
; http://www.foo.bar/status?html
|
||||
; http://www.foo.bar/status?xml
|
||||
;
|
||||
; By default the status page only outputs short status. Passing 'full' in the
|
||||
; query string will also return status for each pool process.
|
||||
; Example:
|
||||
; http://www.foo.bar/status?full
|
||||
; http://www.foo.bar/status?json&full
|
||||
; http://www.foo.bar/status?html&full
|
||||
; http://www.foo.bar/status?xml&full
|
||||
; The Full status returns for each process:
|
||||
; pid - the PID of the process;
|
||||
; state - the state of the process (Idle, Running, ...);
|
||||
; start time - the date and time the process has started;
|
||||
; start since - the number of seconds since the process has started;
|
||||
; requests - the number of requests the process has served;
|
||||
; request duration - the duration in µs of the requests;
|
||||
; request method - the request method (GET, POST, ...);
|
||||
; request URI - the request URI with the query string;
|
||||
; content length - the content length of the request (only with POST);
|
||||
; user - the user (PHP_AUTH_USER) (or '-' if not set);
|
||||
; script - the main script called (or '-' if not set);
|
||||
; last request cpu - the %cpu the last request consumed
|
||||
; it's always 0 if the process is not in Idle state
|
||||
; because CPU calculation is done when the request
|
||||
; processing has terminated;
|
||||
; last request memory - the max amount of memory the last request consumed
|
||||
; it's always 0 if the process is not in Idle state
|
||||
; because memory calculation is done when the request
|
||||
; processing has terminated;
|
||||
; If the process is in Idle state, then informations are related to the
|
||||
; last request the process has served. Otherwise informations are related to
|
||||
; the current request being served.
|
||||
; Example output:
|
||||
; ************************
|
||||
; pid: 31330
|
||||
; state: Running
|
||||
; start time: 01/Jul/2011:17:53:49 +0200
|
||||
; start since: 63087
|
||||
; requests: 12808
|
||||
; request duration: 1250261
|
||||
; request method: GET
|
||||
; request URI: /test_mem.php?N=10000
|
||||
; content length: 0
|
||||
; user: -
|
||||
; script: /home/fat/web/docs/php/test_mem.php
|
||||
; last request cpu: 0.00
|
||||
; last request memory: 0
|
||||
;
|
||||
; Note: There is a real-time FPM status monitoring sample web page available
|
||||
; It's available in: /usr/local/share/php/fpm/status.html
|
||||
;
|
||||
; Note: The value must start with a leading slash (/). The value can be
|
||||
; anything, but it may not be a good idea to use the .php extension or it
|
||||
; may conflict with a real PHP file.
|
||||
; Default Value: not set
|
||||
pm.status_path = /status
|
||||
|
||||
; The ping URI to call the monitoring page of FPM. If this value is not set, no
|
||||
; URI will be recognized as a ping page. This could be used to test from outside
|
||||
; that FPM is alive and responding, or to
|
||||
; - create a graph of FPM availability (rrd or such);
|
||||
; - remove a server from a group if it is not responding (load balancing);
|
||||
; - trigger alerts for the operating team (24/7).
|
||||
; Note: The value must start with a leading slash (/). The value can be
|
||||
; anything, but it may not be a good idea to use the .php extension or it
|
||||
; may conflict with a real PHP file.
|
||||
; Default Value: not set
|
||||
ping.path = /health
|
||||
|
||||
; This directive may be used to customize the response of a ping request. The
|
||||
; response is formatted as text/plain with a 200 response code.
|
||||
; Default Value: pong
|
||||
ping.response = OK
|
||||
|
||||
; The access log file
|
||||
; Default: not set
|
||||
;access.log = log/$pool.access.log
|
||||
|
||||
; The access log format.
|
||||
; The following syntax is allowed
|
||||
; %%: the '%' character
|
||||
; %C: %CPU used by the request
|
||||
; it can accept the following format:
|
||||
; - %{user}C for user CPU only
|
||||
; - %{system}C for system CPU only
|
||||
; - %{total}C for user + system CPU (default)
|
||||
; %d: time taken to serve the request
|
||||
; it can accept the following format:
|
||||
; - %{seconds}d (default)
|
||||
; - %{miliseconds}d
|
||||
; - %{mili}d
|
||||
; - %{microseconds}d
|
||||
; - %{micro}d
|
||||
; %e: an environment variable (same as $_ENV or $_SERVER)
|
||||
; it must be associated with embraces to specify the name of the env
|
||||
; variable. Some exemples:
|
||||
; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
|
||||
; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
|
||||
; %f: script filename
|
||||
; %l: content-length of the request (for POST request only)
|
||||
; %m: request method
|
||||
; %M: peak of memory allocated by PHP
|
||||
; it can accept the following format:
|
||||
; - %{bytes}M (default)
|
||||
; - %{kilobytes}M
|
||||
; - %{kilo}M
|
||||
; - %{megabytes}M
|
||||
; - %{mega}M
|
||||
; %n: pool name
|
||||
; %o: output header
|
||||
; it must be associated with embraces to specify the name of the header:
|
||||
; - %{Content-Type}o
|
||||
; - %{X-Powered-By}o
|
||||
; - %{Transfert-Encoding}o
|
||||
; - ....
|
||||
; %p: PID of the child that serviced the request
|
||||
; %P: PID of the parent of the child that serviced the request
|
||||
; %q: the query string
|
||||
; %Q: the '?' character if query string exists
|
||||
; %r: the request URI (without the query string, see %q and %Q)
|
||||
; %R: remote IP address
|
||||
; %s: status (response code)
|
||||
; %t: server time the request was received
|
||||
; it can accept a strftime(3) format:
|
||||
; %d/%b/%Y:%H:%M:%S %z (default)
|
||||
; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
|
||||
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
|
||||
; %T: time the log has been written (the request has finished)
|
||||
; it can accept a strftime(3) format:
|
||||
; %d/%b/%Y:%H:%M:%S %z (default)
|
||||
; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
|
||||
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
|
||||
; %u: remote user
|
||||
;
|
||||
; Default: "%R - %u %t \"%m %r\" %s"
|
||||
;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
|
||||
|
||||
; The log file for slow requests
|
||||
; Default Value: not set
|
||||
; Note: slowlog is mandatory if request_slowlog_timeout is set
|
||||
;slowlog = log/$pool.log.slow
|
||||
|
||||
; The timeout for serving a single request after which a PHP backtrace will be
|
||||
; dumped to the 'slowlog' file. A value of '0s' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
;request_slowlog_timeout = 0
|
||||
|
||||
; Depth of slow log stack trace.
|
||||
; Default Value: 20
|
||||
;request_slowlog_trace_depth = 20
|
||||
|
||||
; The timeout for serving a single request after which the worker process will
|
||||
; be killed. This option should be used when the 'max_execution_time' ini option
|
||||
; does not stop script execution for some reason. A value of '0' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
request_terminate_timeout = 360
|
||||
|
||||
; Set open file descriptor rlimit.
|
||||
; Default Value: system defined value
|
||||
rlimit_files = 131072
|
||||
|
||||
; Set max core size rlimit.
|
||||
; Possible Values: 'unlimited' or an integer greater or equal to 0
|
||||
; Default Value: system defined value
|
||||
rlimit_core = unlimited
|
||||
|
||||
; Chroot to this directory at the start. This value must be defined as an
|
||||
; absolute path. When this value is not set, chroot is not used.
|
||||
; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
|
||||
; of its subdirectories. If the pool prefix is not set, the global prefix
|
||||
; will be used instead.
|
||||
; Note: chrooting is a great security feature and should be used whenever
|
||||
; possible. However, all PHP paths will be relative to the chroot
|
||||
; (error_log, sessions.save_path, ...).
|
||||
; Default Value: not set
|
||||
;chroot =
|
||||
|
||||
; Chdir to this directory at the start.
|
||||
; Note: relative path can be used.
|
||||
; Default Value: current directory or / when chroot
|
||||
;chdir = /var/www
|
||||
|
||||
; Redirect worker stdout and stderr into main error log. If not set, stdout and
|
||||
; stderr will be redirected to /dev/null according to FastCGI specs.
|
||||
; Note: on highloaded environement, this can cause some delay in the page
|
||||
; process time (several ms).
|
||||
; Default Value: no
|
||||
catch_workers_output = yes
|
||||
|
||||
; Clear environment in FPM workers
|
||||
; Prevents arbitrary environment variables from reaching FPM worker processes
|
||||
; by clearing the environment in workers before env vars specified in this
|
||||
; pool configuration are added.
|
||||
; Setting to "no" will make all environment variables available to PHP code
|
||||
; via getenv(), $_ENV and $_SERVER.
|
||||
; Default Value: yes
|
||||
;clear_env = no
|
||||
|
||||
; Limits the extensions of the main script FPM will allow to parse. This can
|
||||
; prevent configuration mistakes on the web server side. You should only limit
|
||||
; FPM to .php extensions to prevent malicious users to use other extensions to
|
||||
; execute php code.
|
||||
; Note: set an empty value to allow all extensions.
|
||||
; Default Value: .php
|
||||
;security.limit_extensions = .php .php3 .php4 .php5 .php7
|
||||
|
||||
; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
|
||||
; the current environment.
|
||||
; Default Value: clean env
|
||||
;env[HOSTNAME] = $HOSTNAME
|
||||
;env[PATH] = /usr/local/bin:/usr/bin:/bin
|
||||
;env[TMP] = /tmp
|
||||
;env[TMPDIR] = /tmp
|
||||
;env[TEMP] = /tmp
|
||||
|
||||
; Additional php.ini defines, specific to this pool of workers. These settings
|
||||
; overwrite the values previously defined in the php.ini. The directives are the
|
||||
; same as the PHP SAPI:
|
||||
; php_value/php_flag - you can set classic ini defines which can
|
||||
; be overwritten from PHP call 'ini_set'.
|
||||
; php_admin_value/php_admin_flag - these directives won't be overwritten by
|
||||
; PHP call 'ini_set'
|
||||
; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
|
||||
|
||||
; Defining 'extension' will load the corresponding shared extension from
|
||||
; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
|
||||
; overwrite previously defined php.ini values, but will append the new value
|
||||
; instead.
|
||||
|
||||
; Note: path INI options can be relative and will be expanded with the prefix
|
||||
; (pool, global or /usr/local)
|
||||
|
||||
; Default Value: nothing is defined by default except the values in php.ini and
|
||||
; specified at startup with the -d argument
|
||||
;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
|
||||
;php_flag[display_errors] = off
|
||||
;php_admin_value[error_log] = /var/log/fpm-php.www.log
|
||||
;php_admin_flag[log_errors] = on
|
||||
;php_admin_value[memory_limit] = 32M
|
||||
@@ -0,0 +1,13 @@
|
||||
version: "3"
|
||||
|
||||
services:
|
||||
php72:
|
||||
image: registry.chiefsoft.net/php-fpm:7.2
|
||||
build:
|
||||
context: ./
|
||||
dockerfile: Dockerfile
|
||||
hostname: php72
|
||||
container_name: php72
|
||||
volumes:
|
||||
- ./configs:/cfgs
|
||||
env_file: .env
|
||||
Executable
+15
@@ -0,0 +1,15 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! "$PHP_CRONTABS_PATH" == "" ]; then
|
||||
printf "env CRONTABS_PATH: setting up crontabs: ";
|
||||
for f in ${PHP_CRONTABS_PATH}; do
|
||||
printf "$f, ";
|
||||
rm -f /etc/cron.d/${f##*/}
|
||||
cp $f /etc/cron.d/
|
||||
chmod 0644 /etc/cron.d/${f##*/}
|
||||
done
|
||||
echo
|
||||
touch /var/log/cron.log
|
||||
printenv | grep -v "no_proxy" >> /etc/environment
|
||||
/etc/init.d/cron start > /dev/null
|
||||
fi
|
||||
@@ -0,0 +1,68 @@
|
||||
#!/bin/bash
|
||||
|
||||
echo "[`date +"%d-%b-%Y %T"`] PHP-FPM Docker container boot"
|
||||
|
||||
### create system user for php pool
|
||||
if [ ! "$PHP_USER" == "" ] && [ ! "$PHP_UID" == "" ] && [ ! "$PHP_GID" == "" ] && [ ! "$PHP_HOME" == "" ]; then
|
||||
echo "env PHP_USER: creating new system user: ${PHP_USER} ${PHP_UID}:${PHP_GID} ${PHP_HOME}"
|
||||
mkdir -p $PHP_HOME && \
|
||||
groupadd -f $PHP_USER -g $PHP_GID && \
|
||||
useradd -d $PHP_HOME -u $PHP_UID -g $PHP_GID -s /usr/sbin/nologin $PHP_USER
|
||||
fi
|
||||
|
||||
### load PHP ini configurations
|
||||
if [ ! "$PHP_INI_PATH" == "" ]; then
|
||||
printf "env PHP_INI_PATH: "
|
||||
for f in ${PHP_INI_PATH}; do
|
||||
printf "$f, ";
|
||||
rm -f /usr/local/etc/php/conf.d/${f##*/}
|
||||
cp $f /usr/local/etc/php/conf.d/
|
||||
done
|
||||
echo "into [ /usr/local/etc/php/conf.d/ ] folder..."
|
||||
fi
|
||||
|
||||
### make sure to create clean php-fpm.conf
|
||||
### to avoid adding multiple times the same lines next
|
||||
### in case container is restarting
|
||||
echo "[global]" > /usr/local/etc/php-fpm.conf
|
||||
echo "include=etc/php-fpm.d/*.conf" >> /usr/local/etc/php-fpm.conf
|
||||
|
||||
### load PHP-FPM pool configurations
|
||||
if [ ! "$PHP_POOL_PATH" == "" ]; then
|
||||
printf "env PHP_POOL_PATH: "
|
||||
for f in ${PHP_POOL_PATH}; do
|
||||
printf "$f, ";
|
||||
rm -f /usr/local/etc/php-fpm.d/${f##*/}
|
||||
cp $f /usr/local/etc/php-fpm.d/
|
||||
done
|
||||
echo "into [ /usr/local/etc/php-fpm.d/ ] folder..."
|
||||
fi
|
||||
|
||||
### load boot bash scripts
|
||||
for f in /usr/local/bin/*.sh; do
|
||||
/bin/bash -c $f
|
||||
done
|
||||
|
||||
### load additional on-demand scripts
|
||||
if [ ! -z ${PHP_BOOT_SCRIPTS+x} ] && [ "$PHP_BOOT_SCRIPTS" != "" ]; then
|
||||
printf "env PHP_BOOT_SCRIPTS: "
|
||||
|
||||
for f in ${PHP_BOOT_SCRIPTS}; do
|
||||
printf "$f, ";
|
||||
|
||||
rm -f /usr/local/bin/${f##*/}
|
||||
cp $f /usr/local/bin/
|
||||
|
||||
chmod +x /usr/local/bin/${f##*/}
|
||||
done
|
||||
|
||||
echo
|
||||
|
||||
for f in ${PHP_BOOT_SCRIPTS}; do
|
||||
/bin/bash -c /usr/local/bin/${f##*/}
|
||||
done
|
||||
fi
|
||||
|
||||
### expose php version
|
||||
echo
|
||||
/usr/local/bin/php -v
|
||||
@@ -0,0 +1,11 @@
|
||||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
/usr/local/bin/docker-boot
|
||||
|
||||
# first arg is `-f` or `--some-option`
|
||||
if [ "${1#-}" != "$1" ]; then
|
||||
set -- php-fpm "$@"
|
||||
fi
|
||||
|
||||
exec "$@"
|
||||
@@ -0,0 +1,13 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${NEWRELIC_LICENSE+x} ] && [ "$NEWRELIC_LICENSE" != "" ] ; then
|
||||
echo "env NEWRELIC_LICENSE: setting up newrelic license"
|
||||
sed -i "s/REPLACE_WITH_REAL_KEY/$NEWRELIC_LICENSE/g" /usr/local/etc/php/conf.d/newrelic.ini
|
||||
nrsysmond-config --set license_key=$NEWRELIC_LICENSE
|
||||
|
||||
service newrelic-sysmond start > /dev/null
|
||||
|
||||
chmod u+rw,g+rw,o+rw /var/log/newrelic/newrelic-daemon.log
|
||||
else
|
||||
rm -f /usr/local/etc/php/conf.d/newrelic.ini
|
||||
fi
|
||||
@@ -0,0 +1,39 @@
|
||||
#!/usr/local/bin/php
|
||||
<?php
|
||||
|
||||
/**
|
||||
* This script is a sendmail wrapper for php to log calls of the php mail() function.
|
||||
* Author: Till Brehm, www.ispconfig.org
|
||||
* (Hopefully) secured by David Goodwin <david @ _palepurple_.co.uk>
|
||||
* https://www.howtoforge.com/how-to-log-emails-sent-with-phps-mail-function-to-detect-form-spam
|
||||
*/
|
||||
|
||||
$sendmail_bin = '/usr/sbin/sendmail';
|
||||
|
||||
// Get the email content
|
||||
$mail = '';
|
||||
$logline = '';
|
||||
$pointer = fopen('php://stdin', 'r');
|
||||
|
||||
while ($line = fgets($pointer)) {
|
||||
if (preg_match('/^to:/i', $line) || preg_match('/^from:/i', $line)) {
|
||||
$logline .= trim($line) . ' ';
|
||||
}
|
||||
$mail .= $line;
|
||||
}
|
||||
|
||||
// Compose the sendmail command
|
||||
$command = 'echo ' . escapeshellarg($mail) . ' | ' . $sendmail_bin . ' -t -i';
|
||||
|
||||
if (isset($_SERVER['argc'])) {
|
||||
for ($i = 1; $i < $_SERVER['argc']; $i++) {
|
||||
$command .= escapeshellarg($_SERVER['argv'][$i]) . ' ';
|
||||
}
|
||||
}
|
||||
|
||||
// Write the log
|
||||
$stdout = fopen('php://stdout', 'w');
|
||||
fwrite($stdout, (isset($_ENV['USER']) ? $_ENV['USER'] . ' ' : '') . $logline . ' - ' . $command . "\n");
|
||||
|
||||
// Execute the command
|
||||
return shell_exec($command);
|
||||
@@ -0,0 +1,32 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${SMTP_LOGIN+x} ] && [ ! -z ${SMTP_PASSWORD+x} ] && [ "$SMTP_LOGIN" != "" ] && [ "$SMTP_PASSWORD" != "" ]; then
|
||||
echo "env SMTP_LOGIN: sendgrid credentials for email routing";
|
||||
echo "[smtp.sendgrid.net]:2525 ${SMTP_LOGIN}:${SMTP_PASSWORD}" > /etc/postfix/sasl_passwd
|
||||
|
||||
postmap /etc/postfix/sasl_passwd
|
||||
chmod 600 /etc/postfix/sasl_passwd.db
|
||||
rm /etc/postfix/sasl_passwd
|
||||
|
||||
### update email relay configuration for SendGrid
|
||||
sed -i 's/default_transport = error//g' /etc/postfix/main.cf
|
||||
sed -i 's/relay_transport = error//g' /etc/postfix/main.cf
|
||||
|
||||
### delete following lines if already exist before adding
|
||||
sed -i '/relayhost/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_tls_security_level/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_auth_enable/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_password_maps/d' /etc/postfix/main.cf
|
||||
sed -i '/header_size_limit/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_security_options/d' /etc/postfix/main.cf
|
||||
|
||||
### add following lines
|
||||
echo "relayhost = [smtp.sendgrid.net]:2525" >> /etc/postfix/main.cf
|
||||
echo "smtp_tls_security_level = encrypt" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_auth_enable = yes" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd" >> /etc/postfix/main.cf
|
||||
echo "header_size_limit = 4096000" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_security_options = noanonymous" >> /etc/postfix/main.cf
|
||||
|
||||
/etc/init.d/postfix start > /dev/null
|
||||
fi
|
||||
Executable
+8
@@ -0,0 +1,8 @@
|
||||
#!/bin/bash
|
||||
|
||||
### update PHP session handler
|
||||
if [ ! "$PHP_SESSION_HANDLER" == "" ] && [ ! "$PHP_SESSION_PATH" == "" ]; then
|
||||
echo "env PHP_SESSION_HANDLER: updating php session handler [ $PHP_SESSION_PATH ]"
|
||||
echo "session.save_handler = $PHP_SESSION_HANDLER" > /usr/local/etc/php/conf.d/zz-session.ini
|
||||
echo "session.save_path = \"$PHP_SESSION_PATH\"" >> /usr/local/etc/php/conf.d/zz-session.ini
|
||||
fi
|
||||
@@ -0,0 +1,17 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${PHP_INI_SCAN_DIR+x} ] && [ "$PHP_INI_SCAN_DIR" != "" ] ; then
|
||||
echo "env PHP_INI_SCAN_DIR: $PHP_INI_SCAN_DIR"
|
||||
|
||||
### break down path by : separator
|
||||
IFS=':' read -ra DIRECTORIES <<< "$PHP_INI_SCAN_DIR"
|
||||
|
||||
for DIR in "${DIRECTORIES[@]}"; do
|
||||
### check if there are any php pool configuration files to copy
|
||||
COUNT=`ls -1 $DIR/*.conf 2>/dev/null | wc -l`
|
||||
|
||||
if [ $COUNT != "0" ] ; then
|
||||
cp -f $DIR/*.conf /usr/local/etc/php-fpm.d/
|
||||
fi
|
||||
done
|
||||
fi
|
||||
@@ -0,0 +1,16 @@
|
||||
PHP_UID=1000
|
||||
PHP_GID=1000
|
||||
PHP_HOME=/app
|
||||
PHP_USER=php-fpm
|
||||
# PHP_INI_SCAN_DIR=/cfgs:/usr/local/etc/php/conf.d
|
||||
PHP_INI_PATH=/cfgs/php.ini
|
||||
PHP_POOL_PATH=/cfgs/*/*-pool.conf
|
||||
PHP_BOOT_SCRIPTS=/cfgs/start.sh
|
||||
PHP_CRONTABS_PATH=/cfgs/cron
|
||||
PHP_SESSION_HANDLER=redis
|
||||
PHP_SESSION_PATH=tcp://redis.host:6379
|
||||
|
||||
# private
|
||||
TEST_EMAIL=name@domain.com
|
||||
NEWRELIC_LICENSE=newrelic_license
|
||||
SENDGRID_API_KEY=sendgrid_api_key
|
||||
@@ -0,0 +1 @@
|
||||
.env
|
||||
@@ -0,0 +1,156 @@
|
||||
FROM php:7.3-fpm
|
||||
|
||||
RUN apt-get update -y
|
||||
RUN apt-get -y install gcc make autoconf libc-dev pkg-config libzip-dev
|
||||
|
||||
RUN apt-get install -y --no-install-recommends \
|
||||
git \
|
||||
libmemcached-dev \
|
||||
libz-dev \
|
||||
libpq-dev \
|
||||
libssl-dev libssl-doc libsasl2-dev \
|
||||
libmcrypt-dev \
|
||||
libxml2-dev \
|
||||
zlib1g-dev libicu-dev g++ \
|
||||
libldap2-dev libbz2-dev \
|
||||
curl libcurl4-openssl-dev \
|
||||
libenchant-dev libgmp-dev firebird-dev libib-util \
|
||||
re2c libpng++-dev \
|
||||
libwebp-dev libjpeg-dev libjpeg62-turbo-dev libpng-dev libxpm-dev libvpx-dev libfreetype6-dev \
|
||||
libmagick++-dev \
|
||||
libmagickwand-dev \
|
||||
zlib1g-dev libgd-dev \
|
||||
libtidy-dev libxslt1-dev libmagic-dev libexif-dev file \
|
||||
sqlite3 libsqlite3-dev libxslt-dev \
|
||||
libmhash2 libmhash-dev libc-client-dev libkrb5-dev libssh2-1-dev \
|
||||
unzip libpcre3 libpcre3-dev \
|
||||
poppler-utils ghostscript libmagickwand-6.q16-dev libsnmp-dev libedit-dev libreadline6-dev libsodium-dev \
|
||||
freetds-bin freetds-dev freetds-common libct4 libsybdb5 tdsodbc libreadline-dev librecode-dev libpspell-dev
|
||||
|
||||
# fix for docker-php-ext-install pdo_dblib
|
||||
# https://stackoverflow.com/questions/43617752/docker-php-and-freetds-cannot-find-freetds-in-know-installation-directories
|
||||
RUN ln -s /usr/lib/x86_64-linux-gnu/libsybdb.so /usr/lib/
|
||||
|
||||
RUN docker-php-ext-configure hash --with-mhash && \
|
||||
docker-php-ext-install hash
|
||||
RUN docker-php-ext-configure imap --with-kerberos --with-imap-ssl && \
|
||||
docker-php-ext-install imap iconv
|
||||
|
||||
RUN docker-php-ext-install bcmath bz2 calendar ctype curl dba dom enchant
|
||||
RUN docker-php-ext-install fileinfo exif ftp gettext gmp
|
||||
RUN docker-php-ext-install interbase intl json ldap mbstring mysqli
|
||||
RUN docker-php-ext-install opcache pcntl pspell
|
||||
RUN docker-php-ext-install pdo pdo_dblib pdo_mysql pdo_pgsql pdo_sqlite pgsql phar posix
|
||||
RUN docker-php-ext-install readline recode
|
||||
RUN docker-php-ext-install session shmop simplexml soap sockets sodium
|
||||
RUN docker-php-ext-install sysvmsg sysvsem sysvshm
|
||||
# RUN docker-php-ext-install snmp
|
||||
|
||||
# fix for docker-php-ext-install xmlreader
|
||||
# https://github.com/docker-library/php/issues/373
|
||||
RUN export CFLAGS="-I/usr/src/php" && docker-php-ext-install xmlreader xmlwriter xml xmlrpc xsl
|
||||
|
||||
RUN docker-php-ext-install tidy tokenizer wddx zend_test zip
|
||||
|
||||
# already build in... what they say...
|
||||
# RUN docker-php-ext-install filter reflection spl standard
|
||||
# RUN docker-php-ext-install pdo_firebird pdo_oci
|
||||
|
||||
# install pecl extension
|
||||
RUN pecl install ds && \
|
||||
pecl install imagick && \
|
||||
pecl install igbinary && \
|
||||
pecl install redis && \
|
||||
pecl install memcached && \
|
||||
docker-php-ext-enable ds imagick igbinary redis memcached
|
||||
|
||||
# https://serverpilot.io/docs/how-to-install-the-php-ssh2-extension
|
||||
# pecl install ssh2-1.1.2 && \
|
||||
# docker-php-ext-enable ssh2
|
||||
|
||||
# install pecl extension
|
||||
RUN pecl install mongodb && docker-php-ext-enable mongodb
|
||||
|
||||
# install xdebug
|
||||
# RUN pecl install xdebug && docker-php-ext-enable xdebug
|
||||
|
||||
RUN yes "" | pecl install msgpack && \
|
||||
docker-php-ext-enable msgpack
|
||||
|
||||
# install APCu
|
||||
RUN pecl install apcu && \
|
||||
docker-php-ext-enable apcu --ini-name docker-php-ext-10-apcu.ini
|
||||
|
||||
RUN apt-get update -y && apt-get install -y apt-transport-https locales gnupg
|
||||
|
||||
# install MSSQL support and ODBC driver
|
||||
# RUN curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add - && \
|
||||
# curl https://packages.microsoft.com/config/debian/8/prod.list > /etc/apt/sources.list.d/mssql-release.list && \
|
||||
# export DEBIAN_FRONTEND=noninteractive && apt-get update -y && \
|
||||
# ACCEPT_EULA=Y apt-get install -y msodbcsql unixodbc-dev
|
||||
# RUN set -xe \
|
||||
# && pecl install pdo_sqlsrv \
|
||||
# && docker-php-ext-enable pdo_sqlsrv \
|
||||
# && apt-get purge -y unixodbc-dev && apt-get autoremove -y && apt-get clean
|
||||
|
||||
# RUN docker-php-ext-configure spl && docker-php-ext-install spl
|
||||
|
||||
# install GD
|
||||
RUN docker-php-ext-configure gd \
|
||||
--with-png-dir \
|
||||
--with-jpeg-dir \
|
||||
--with-xpm-dir \
|
||||
--with-webp-dir \
|
||||
--with-freetype-dir \
|
||||
&& docker-php-ext-install -j$(nproc) gd
|
||||
|
||||
# set locale to utf-8
|
||||
RUN echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && locale-gen
|
||||
ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en' LC_ALL='en_US.UTF-8'
|
||||
|
||||
#--------------------------------------------------------------------------
|
||||
# Final Touches
|
||||
#--------------------------------------------------------------------------
|
||||
|
||||
# install required libs for health check
|
||||
RUN apt-get -y install libfcgi0ldbl nano htop iotop lsof cron mariadb-client redis-tools wget
|
||||
|
||||
# install composer
|
||||
RUN EXPECTED_CHECKSUM="$(wget -q -O - https://composer.github.io/installer.sig)" && \
|
||||
php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" && \
|
||||
ACTUAL_CHECKSUM="$(php -r "echo hash_file('sha384', 'composer-setup.php');")" && \
|
||||
if [ "$EXPECTED_CHECKSUM" != "$ACTUAL_CHECKSUM" ]; then >&2 echo 'ERROR: Invalid installer checksum' && exit 1; fi
|
||||
|
||||
RUN php composer-setup.php --quiet && rm composer-setup.php && \
|
||||
mv composer.phar /usr/local/sbin/composer && \
|
||||
chmod +x /usr/local/sbin/composer
|
||||
|
||||
# install NewRelic agent
|
||||
RUN echo 'deb http://apt.newrelic.com/debian/ newrelic non-free' | tee /etc/apt/sources.list.d/newrelic.list && \
|
||||
curl https://download.newrelic.com/548C16BF.gpg | apt-key add - && \
|
||||
apt-get -y update && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get -y install newrelic-php5 newrelic-sysmond && \
|
||||
export NR_INSTALL_SILENT=1 && newrelic-install install
|
||||
|
||||
# install SendGrid
|
||||
RUN echo "postfix postfix/mailname string localhost" | debconf-set-selections && \
|
||||
echo "postfix postfix/main_mailer_type string 'Internet Site'" | debconf-set-selections && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install postfix libsasl2-modules -y
|
||||
|
||||
# Set default work directory
|
||||
ADD scripts/* /usr/local/bin/
|
||||
RUN chmod +x /usr/local/bin/*
|
||||
|
||||
# Add default configuration files
|
||||
ADD configs/php.ini /usr/local/etc/php/
|
||||
ADD configs/www.conf /usr/local/etc/php-fpm.d/
|
||||
|
||||
# Health check
|
||||
RUN echo '#!/bin/bash' > /healthcheck && \
|
||||
echo 'env -i SCRIPT_NAME=/health SCRIPT_FILENAME=/health REQUEST_METHOD=GET cgi-fcgi -bind -connect 127.0.0.1:9000 || exit 1' >> /healthcheck && \
|
||||
chmod +x /healthcheck
|
||||
|
||||
# Clean up
|
||||
RUN apt-get remove -y git && apt-get autoremove -y && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
||||
|
||||
WORKDIR /
|
||||
Executable
+1
@@ -0,0 +1 @@
|
||||
* * * * * root /cfgs/job.sh
|
||||
Executable
+2
@@ -0,0 +1,2 @@
|
||||
#!/bin/bash
|
||||
echo "[ cronjob task ] executed at `date`" > /proc/1/fd/2
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,2 @@
|
||||
#!/bin/bash
|
||||
echo "[ start.sh ] Boot script test..." > /proc/1/fd/2
|
||||
@@ -0,0 +1,423 @@
|
||||
; Start a new pool named 'www'.
|
||||
; the variable $pool can be used in any directive and will be replaced by the
|
||||
; pool name ('www' here)
|
||||
[www]
|
||||
|
||||
; Per pool prefix
|
||||
; It only applies on the following directives:
|
||||
; - 'access.log'
|
||||
; - 'slowlog'
|
||||
; - 'listen' (unixsocket)
|
||||
; - 'chroot'
|
||||
; - 'chdir'
|
||||
; - 'php_values'
|
||||
; - 'php_admin_values'
|
||||
; When not set, the global prefix (or NONE) applies instead.
|
||||
; Note: This directive can also be relative to the global prefix.
|
||||
; Default Value: none
|
||||
;prefix = /path/to/pools/$pool
|
||||
|
||||
; Unix user/group of processes
|
||||
; Note: The user is mandatory. If the group is not set, the default user's group
|
||||
; will be used.
|
||||
user = www-data
|
||||
group = www-data
|
||||
|
||||
; The address on which to accept FastCGI requests.
|
||||
; Valid syntaxes are:
|
||||
; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on
|
||||
; a specific port;
|
||||
; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
|
||||
; a specific port;
|
||||
; 'port' - to listen on a TCP socket to all addresses
|
||||
; (IPv6 and IPv4-mapped) on a specific port;
|
||||
; '/path/to/unix/socket' - to listen on a unix socket.
|
||||
; Note: This value is mandatory.
|
||||
listen = 9000
|
||||
|
||||
; Set listen(2) backlog.
|
||||
; Default Value: 511 (-1 on FreeBSD and OpenBSD)
|
||||
;listen.backlog = 511
|
||||
|
||||
; Set permissions for unix socket, if one is used. In Linux, read/write
|
||||
; permissions must be set in order to allow connections from a web server. Many
|
||||
; BSD-derived systems allow connections regardless of permissions.
|
||||
; Default Values: user and group are set as the running user
|
||||
; mode is set to 0660
|
||||
;listen.owner = www-data
|
||||
;listen.group = www-data
|
||||
;listen.mode = 0660
|
||||
; When POSIX Access Control Lists are supported you can set them using
|
||||
; these options, value is a comma separated list of user/group names.
|
||||
; When set, listen.owner and listen.group are ignored
|
||||
;listen.acl_users =
|
||||
;listen.acl_groups =
|
||||
|
||||
; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
|
||||
; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
|
||||
; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
|
||||
; must be separated by a comma. If this value is left blank, connections will be
|
||||
; accepted from any ip address.
|
||||
; Default Value: any
|
||||
;listen.allowed_clients = 127.0.0.1
|
||||
|
||||
; Specify the nice(2) priority to apply to the pool processes (only if set)
|
||||
; The value can vary from -19 (highest priority) to 20 (lower priority)
|
||||
; Note: - It will only work if the FPM master process is launched as root
|
||||
; - The pool processes will inherit the master process priority
|
||||
; unless it specified otherwise
|
||||
; Default Value: no set
|
||||
; process.priority = -19
|
||||
|
||||
; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
|
||||
; or group is differrent than the master process user. It allows to create process
|
||||
; core dump and ptrace the process for the pool user.
|
||||
; Default Value: no
|
||||
; process.dumpable = yes
|
||||
|
||||
; Choose how the process manager will control the number of child processes.
|
||||
; Possible Values:
|
||||
; static - a fixed number (pm.max_children) of child processes;
|
||||
; dynamic - the number of child processes are set dynamically based on the
|
||||
; following directives. With this process management, there will be
|
||||
; always at least 1 children.
|
||||
; pm.max_children - the maximum number of children that can
|
||||
; be alive at the same time.
|
||||
; pm.start_servers - the number of children created on startup.
|
||||
; pm.min_spare_servers - the minimum number of children in 'idle'
|
||||
; state (waiting to process). If the number
|
||||
; of 'idle' processes is less than this
|
||||
; number then some children will be created.
|
||||
; pm.max_spare_servers - the maximum number of children in 'idle'
|
||||
; state (waiting to process). If the number
|
||||
; of 'idle' processes is greater than this
|
||||
; number then some children will be killed.
|
||||
; ondemand - no children are created at startup. Children will be forked when
|
||||
; new requests will connect. The following parameter are used:
|
||||
; pm.max_children - the maximum number of children that
|
||||
; can be alive at the same time.
|
||||
; pm.process_idle_timeout - The number of seconds after which
|
||||
; an idle process will be killed.
|
||||
; Note: This value is mandatory.
|
||||
pm = dynamic
|
||||
|
||||
; The number of child processes to be created when pm is set to 'static' and the
|
||||
; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
|
||||
; This value sets the limit on the number of simultaneous requests that will be
|
||||
; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
|
||||
; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
|
||||
; CGI. The below defaults are based on a server without much resources. Don't
|
||||
; forget to tweak pm.* to fit your needs.
|
||||
; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
|
||||
; Note: This value is mandatory.
|
||||
pm.max_children = 5
|
||||
|
||||
; The number of child processes created on startup.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
|
||||
pm.start_servers = 2
|
||||
|
||||
; The desired minimum number of idle server processes.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Note: Mandatory when pm is set to 'dynamic'
|
||||
pm.min_spare_servers = 1
|
||||
|
||||
; The desired maximum number of idle server processes.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Note: Mandatory when pm is set to 'dynamic'
|
||||
pm.max_spare_servers = 3
|
||||
|
||||
; The number of seconds after which an idle process will be killed.
|
||||
; Note: Used only when pm is set to 'ondemand'
|
||||
; Default Value: 10s
|
||||
;pm.process_idle_timeout = 10s;
|
||||
|
||||
; The number of requests each child process should execute before respawning.
|
||||
; This can be useful to work around memory leaks in 3rd party libraries. For
|
||||
; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
|
||||
; Default Value: 0
|
||||
;pm.max_requests = 500
|
||||
|
||||
; The URI to view the FPM status page. If this value is not set, no URI will be
|
||||
; recognized as a status page. It shows the following informations:
|
||||
; pool - the name of the pool;
|
||||
; process manager - static, dynamic or ondemand;
|
||||
; start time - the date and time FPM has started;
|
||||
; start since - number of seconds since FPM has started;
|
||||
; accepted conn - the number of request accepted by the pool;
|
||||
; listen queue - the number of request in the queue of pending
|
||||
; connections (see backlog in listen(2));
|
||||
; max listen queue - the maximum number of requests in the queue
|
||||
; of pending connections since FPM has started;
|
||||
; listen queue len - the size of the socket queue of pending connections;
|
||||
; idle processes - the number of idle processes;
|
||||
; active processes - the number of active processes;
|
||||
; total processes - the number of idle + active processes;
|
||||
; max active processes - the maximum number of active processes since FPM
|
||||
; has started;
|
||||
; max children reached - number of times, the process limit has been reached,
|
||||
; when pm tries to start more children (works only for
|
||||
; pm 'dynamic' and 'ondemand');
|
||||
; Value are updated in real time.
|
||||
; Example output:
|
||||
; pool: www
|
||||
; process manager: static
|
||||
; start time: 01/Jul/2011:17:53:49 +0200
|
||||
; start since: 62636
|
||||
; accepted conn: 190460
|
||||
; listen queue: 0
|
||||
; max listen queue: 1
|
||||
; listen queue len: 42
|
||||
; idle processes: 4
|
||||
; active processes: 11
|
||||
; total processes: 15
|
||||
; max active processes: 12
|
||||
; max children reached: 0
|
||||
;
|
||||
; By default the status page output is formatted as text/plain. Passing either
|
||||
; 'html', 'xml' or 'json' in the query string will return the corresponding
|
||||
; output syntax. Example:
|
||||
; http://www.foo.bar/status
|
||||
; http://www.foo.bar/status?json
|
||||
; http://www.foo.bar/status?html
|
||||
; http://www.foo.bar/status?xml
|
||||
;
|
||||
; By default the status page only outputs short status. Passing 'full' in the
|
||||
; query string will also return status for each pool process.
|
||||
; Example:
|
||||
; http://www.foo.bar/status?full
|
||||
; http://www.foo.bar/status?json&full
|
||||
; http://www.foo.bar/status?html&full
|
||||
; http://www.foo.bar/status?xml&full
|
||||
; The Full status returns for each process:
|
||||
; pid - the PID of the process;
|
||||
; state - the state of the process (Idle, Running, ...);
|
||||
; start time - the date and time the process has started;
|
||||
; start since - the number of seconds since the process has started;
|
||||
; requests - the number of requests the process has served;
|
||||
; request duration - the duration in µs of the requests;
|
||||
; request method - the request method (GET, POST, ...);
|
||||
; request URI - the request URI with the query string;
|
||||
; content length - the content length of the request (only with POST);
|
||||
; user - the user (PHP_AUTH_USER) (or '-' if not set);
|
||||
; script - the main script called (or '-' if not set);
|
||||
; last request cpu - the %cpu the last request consumed
|
||||
; it's always 0 if the process is not in Idle state
|
||||
; because CPU calculation is done when the request
|
||||
; processing has terminated;
|
||||
; last request memory - the max amount of memory the last request consumed
|
||||
; it's always 0 if the process is not in Idle state
|
||||
; because memory calculation is done when the request
|
||||
; processing has terminated;
|
||||
; If the process is in Idle state, then informations are related to the
|
||||
; last request the process has served. Otherwise informations are related to
|
||||
; the current request being served.
|
||||
; Example output:
|
||||
; ************************
|
||||
; pid: 31330
|
||||
; state: Running
|
||||
; start time: 01/Jul/2011:17:53:49 +0200
|
||||
; start since: 63087
|
||||
; requests: 12808
|
||||
; request duration: 1250261
|
||||
; request method: GET
|
||||
; request URI: /test_mem.php?N=10000
|
||||
; content length: 0
|
||||
; user: -
|
||||
; script: /home/fat/web/docs/php/test_mem.php
|
||||
; last request cpu: 0.00
|
||||
; last request memory: 0
|
||||
;
|
||||
; Note: There is a real-time FPM status monitoring sample web page available
|
||||
; It's available in: /usr/local/share/php/fpm/status.html
|
||||
;
|
||||
; Note: The value must start with a leading slash (/). The value can be
|
||||
; anything, but it may not be a good idea to use the .php extension or it
|
||||
; may conflict with a real PHP file.
|
||||
; Default Value: not set
|
||||
pm.status_path = /status
|
||||
|
||||
; The ping URI to call the monitoring page of FPM. If this value is not set, no
|
||||
; URI will be recognized as a ping page. This could be used to test from outside
|
||||
; that FPM is alive and responding, or to
|
||||
; - create a graph of FPM availability (rrd or such);
|
||||
; - remove a server from a group if it is not responding (load balancing);
|
||||
; - trigger alerts for the operating team (24/7).
|
||||
; Note: The value must start with a leading slash (/). The value can be
|
||||
; anything, but it may not be a good idea to use the .php extension or it
|
||||
; may conflict with a real PHP file.
|
||||
; Default Value: not set
|
||||
ping.path = /health
|
||||
|
||||
; This directive may be used to customize the response of a ping request. The
|
||||
; response is formatted as text/plain with a 200 response code.
|
||||
; Default Value: pong
|
||||
ping.response = OK
|
||||
|
||||
; The access log file
|
||||
; Default: not set
|
||||
;access.log = log/$pool.access.log
|
||||
|
||||
; The access log format.
|
||||
; The following syntax is allowed
|
||||
; %%: the '%' character
|
||||
; %C: %CPU used by the request
|
||||
; it can accept the following format:
|
||||
; - %{user}C for user CPU only
|
||||
; - %{system}C for system CPU only
|
||||
; - %{total}C for user + system CPU (default)
|
||||
; %d: time taken to serve the request
|
||||
; it can accept the following format:
|
||||
; - %{seconds}d (default)
|
||||
; - %{miliseconds}d
|
||||
; - %{mili}d
|
||||
; - %{microseconds}d
|
||||
; - %{micro}d
|
||||
; %e: an environment variable (same as $_ENV or $_SERVER)
|
||||
; it must be associated with embraces to specify the name of the env
|
||||
; variable. Some exemples:
|
||||
; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
|
||||
; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
|
||||
; %f: script filename
|
||||
; %l: content-length of the request (for POST request only)
|
||||
; %m: request method
|
||||
; %M: peak of memory allocated by PHP
|
||||
; it can accept the following format:
|
||||
; - %{bytes}M (default)
|
||||
; - %{kilobytes}M
|
||||
; - %{kilo}M
|
||||
; - %{megabytes}M
|
||||
; - %{mega}M
|
||||
; %n: pool name
|
||||
; %o: output header
|
||||
; it must be associated with embraces to specify the name of the header:
|
||||
; - %{Content-Type}o
|
||||
; - %{X-Powered-By}o
|
||||
; - %{Transfert-Encoding}o
|
||||
; - ....
|
||||
; %p: PID of the child that serviced the request
|
||||
; %P: PID of the parent of the child that serviced the request
|
||||
; %q: the query string
|
||||
; %Q: the '?' character if query string exists
|
||||
; %r: the request URI (without the query string, see %q and %Q)
|
||||
; %R: remote IP address
|
||||
; %s: status (response code)
|
||||
; %t: server time the request was received
|
||||
; it can accept a strftime(3) format:
|
||||
; %d/%b/%Y:%H:%M:%S %z (default)
|
||||
; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
|
||||
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
|
||||
; %T: time the log has been written (the request has finished)
|
||||
; it can accept a strftime(3) format:
|
||||
; %d/%b/%Y:%H:%M:%S %z (default)
|
||||
; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
|
||||
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
|
||||
; %u: remote user
|
||||
;
|
||||
; Default: "%R - %u %t \"%m %r\" %s"
|
||||
;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
|
||||
|
||||
; The log file for slow requests
|
||||
; Default Value: not set
|
||||
; Note: slowlog is mandatory if request_slowlog_timeout is set
|
||||
;slowlog = log/$pool.log.slow
|
||||
|
||||
; The timeout for serving a single request after which a PHP backtrace will be
|
||||
; dumped to the 'slowlog' file. A value of '0s' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
;request_slowlog_timeout = 0
|
||||
|
||||
; Depth of slow log stack trace.
|
||||
; Default Value: 20
|
||||
;request_slowlog_trace_depth = 20
|
||||
|
||||
; The timeout for serving a single request after which the worker process will
|
||||
; be killed. This option should be used when the 'max_execution_time' ini option
|
||||
; does not stop script execution for some reason. A value of '0' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
request_terminate_timeout = 360
|
||||
|
||||
; Set open file descriptor rlimit.
|
||||
; Default Value: system defined value
|
||||
rlimit_files = 131072
|
||||
|
||||
; Set max core size rlimit.
|
||||
; Possible Values: 'unlimited' or an integer greater or equal to 0
|
||||
; Default Value: system defined value
|
||||
rlimit_core = unlimited
|
||||
|
||||
; Chroot to this directory at the start. This value must be defined as an
|
||||
; absolute path. When this value is not set, chroot is not used.
|
||||
; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
|
||||
; of its subdirectories. If the pool prefix is not set, the global prefix
|
||||
; will be used instead.
|
||||
; Note: chrooting is a great security feature and should be used whenever
|
||||
; possible. However, all PHP paths will be relative to the chroot
|
||||
; (error_log, sessions.save_path, ...).
|
||||
; Default Value: not set
|
||||
;chroot =
|
||||
|
||||
; Chdir to this directory at the start.
|
||||
; Note: relative path can be used.
|
||||
; Default Value: current directory or / when chroot
|
||||
;chdir = /var/www
|
||||
|
||||
; Redirect worker stdout and stderr into main error log. If not set, stdout and
|
||||
; stderr will be redirected to /dev/null according to FastCGI specs.
|
||||
; Note: on highloaded environement, this can cause some delay in the page
|
||||
; process time (several ms).
|
||||
; Default Value: no
|
||||
catch_workers_output = yes
|
||||
|
||||
; Clear environment in FPM workers
|
||||
; Prevents arbitrary environment variables from reaching FPM worker processes
|
||||
; by clearing the environment in workers before env vars specified in this
|
||||
; pool configuration are added.
|
||||
; Setting to "no" will make all environment variables available to PHP code
|
||||
; via getenv(), $_ENV and $_SERVER.
|
||||
; Default Value: yes
|
||||
;clear_env = no
|
||||
|
||||
; Limits the extensions of the main script FPM will allow to parse. This can
|
||||
; prevent configuration mistakes on the web server side. You should only limit
|
||||
; FPM to .php extensions to prevent malicious users to use other extensions to
|
||||
; execute php code.
|
||||
; Note: set an empty value to allow all extensions.
|
||||
; Default Value: .php
|
||||
;security.limit_extensions = .php .php3 .php4 .php5 .php7
|
||||
|
||||
; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
|
||||
; the current environment.
|
||||
; Default Value: clean env
|
||||
;env[HOSTNAME] = $HOSTNAME
|
||||
;env[PATH] = /usr/local/bin:/usr/bin:/bin
|
||||
;env[TMP] = /tmp
|
||||
;env[TMPDIR] = /tmp
|
||||
;env[TEMP] = /tmp
|
||||
|
||||
; Additional php.ini defines, specific to this pool of workers. These settings
|
||||
; overwrite the values previously defined in the php.ini. The directives are the
|
||||
; same as the PHP SAPI:
|
||||
; php_value/php_flag - you can set classic ini defines which can
|
||||
; be overwritten from PHP call 'ini_set'.
|
||||
; php_admin_value/php_admin_flag - these directives won't be overwritten by
|
||||
; PHP call 'ini_set'
|
||||
; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
|
||||
|
||||
; Defining 'extension' will load the corresponding shared extension from
|
||||
; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
|
||||
; overwrite previously defined php.ini values, but will append the new value
|
||||
; instead.
|
||||
|
||||
; Note: path INI options can be relative and will be expanded with the prefix
|
||||
; (pool, global or /usr/local)
|
||||
|
||||
; Default Value: nothing is defined by default except the values in php.ini and
|
||||
; specified at startup with the -d argument
|
||||
;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
|
||||
;php_flag[display_errors] = off
|
||||
;php_admin_value[error_log] = /var/log/fpm-php.www.log
|
||||
;php_admin_flag[log_errors] = on
|
||||
;php_admin_value[memory_limit] = 32M
|
||||
@@ -0,0 +1,17 @@
|
||||
version: "3"
|
||||
|
||||
services:
|
||||
php73:
|
||||
build:
|
||||
context: ./
|
||||
dockerfile: Dockerfile
|
||||
depends_on:
|
||||
- redis
|
||||
hostname: php73
|
||||
container_name: php73
|
||||
volumes:
|
||||
- ./configs:/cfgs
|
||||
env_file: .env
|
||||
|
||||
redis:
|
||||
image: redis:latest
|
||||
Executable
+15
@@ -0,0 +1,15 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! "$PHP_CRONTABS_PATH" == "" ]; then
|
||||
echo "env CRONTABS_PATH: setting up crontabs [ $PHP_CRONTABS_PATH ]:";
|
||||
for f in ${PHP_CRONTABS_PATH}; do
|
||||
echo " - $f";
|
||||
rm -f /etc/cron.d/${f##*/}
|
||||
cp $f /etc/cron.d/
|
||||
chmod 0644 /etc/cron.d/${f##*/}
|
||||
done
|
||||
|
||||
touch /var/log/cron.log
|
||||
printenv | grep -v "no_proxy" >> /etc/default/locale
|
||||
/etc/init.d/cron start > /dev/null
|
||||
fi
|
||||
@@ -0,0 +1,86 @@
|
||||
#!/bin/bash
|
||||
|
||||
echo "[`date +"%d-%b-%Y %T"`] PHP-FPM Docker container boot"
|
||||
|
||||
### create system user for php pool
|
||||
if [ ! "$PHP_USER" == "" ] && [ ! "$PHP_UID" == "" ] && [ ! "$PHP_GID" == "" ] && [ ! "$PHP_HOME" == "" ]; then
|
||||
echo "env PHP_USER: creating new system user: ${PHP_USER} ${PHP_UID}:${PHP_GID} ${PHP_HOME}"
|
||||
mkdir -p $PHP_HOME && \
|
||||
groupadd -f $PHP_USER -g $PHP_GID && \
|
||||
useradd -d $PHP_HOME -u $PHP_UID -g $PHP_GID -s /usr/sbin/nologin $PHP_USER
|
||||
fi
|
||||
|
||||
|
||||
### load PHP ini configurations
|
||||
if [ ! "$PHP_INI_PATH" == "" ]; then
|
||||
echo "env PHP_INI_PATH: copy from [ $PHP_INI_PATH ] into [ /usr/local/etc/php/conf.d/ ] folder"
|
||||
for f in ${PHP_INI_PATH}; do
|
||||
echo " - $f";
|
||||
rm -f /usr/local/etc/php/conf.d/${f##*/}
|
||||
cp $f /usr/local/etc/php/conf.d/
|
||||
done
|
||||
fi
|
||||
|
||||
|
||||
### make sure to create clean php-fpm.conf
|
||||
### to avoid adding multiple times the same lines next
|
||||
### in case container is restarting
|
||||
echo "[global]" > /usr/local/etc/php-fpm.conf
|
||||
echo "include=etc/php-fpm.d/*.conf" >> /usr/local/etc/php-fpm.conf
|
||||
|
||||
### load PHP-FPM pool configurations
|
||||
if [ ! "$PHP_POOL_PATH" == "" ]; then
|
||||
echo "env PHP_POOL_PATH: copy from [ $PHP_POOL_PATH ] into [ /usr/local/etc/php-fpm.d/ ] folder"
|
||||
for f in ${PHP_POOL_PATH}; do
|
||||
echo " - $f";
|
||||
rm -f /usr/local/etc/php-fpm.d/${f##*/}
|
||||
cp $f /usr/local/etc/php-fpm.d/
|
||||
done
|
||||
fi
|
||||
|
||||
|
||||
### scan for config files in folders from PHP_INI_SCAN_DIR
|
||||
if [ ! -z ${PHP_INI_SCAN_DIR+x} ] && [ "$PHP_INI_SCAN_DIR" != "" ] ; then
|
||||
echo "env PHP_INI_SCAN_DIR: copy from [ $PHP_INI_SCAN_DIR ] into [ /usr/local/etc/php-fpm.d/ ] folder"
|
||||
|
||||
### break down path by : separator
|
||||
IFS=':' read -ra DIRECTORIES <<< "$PHP_INI_SCAN_DIR"
|
||||
|
||||
for DIR in "${DIRECTORIES[@]}"; do
|
||||
### check if there are any php pool configuration files to copy
|
||||
COUNT=`ls -1 $DIR/*.conf 2>/dev/null | wc -l`
|
||||
|
||||
if [ $COUNT != "0" ] ; then
|
||||
echo " - $DIR/*.conf";
|
||||
cp -f $DIR/*.conf /usr/local/etc/php-fpm.d/
|
||||
fi
|
||||
done
|
||||
fi
|
||||
|
||||
|
||||
### load boot bash scripts
|
||||
for f in /usr/local/bin/*.sh; do
|
||||
/bin/bash -c $f
|
||||
done
|
||||
|
||||
### load additional on-demand scripts
|
||||
if [ ! -z ${PHP_BOOT_SCRIPTS+x} ] && [ "$PHP_BOOT_SCRIPTS" != "" ]; then
|
||||
echo "env PHP_BOOT_SCRIPTS: executing scripts in [ $PHP_BOOT_SCRIPTS ]"
|
||||
|
||||
for f in ${PHP_BOOT_SCRIPTS}; do
|
||||
echo " - $f";
|
||||
|
||||
rm -f /usr/local/bin/${f##*/}
|
||||
cp $f /usr/local/bin/
|
||||
|
||||
chmod +x /usr/local/bin/${f##*/}
|
||||
done
|
||||
|
||||
for f in ${PHP_BOOT_SCRIPTS}; do
|
||||
/bin/bash -c /usr/local/bin/${f##*/}
|
||||
done
|
||||
fi
|
||||
|
||||
### expose php version
|
||||
echo
|
||||
/usr/local/bin/php -v
|
||||
@@ -0,0 +1,11 @@
|
||||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
/usr/local/bin/docker-boot
|
||||
|
||||
# first arg is `-f` or `--some-option`
|
||||
if [ "${1#-}" != "$1" ]; then
|
||||
set -- php-fpm "$@"
|
||||
fi
|
||||
|
||||
exec "$@"
|
||||
@@ -0,0 +1,10 @@
|
||||
<?php
|
||||
|
||||
if (isset($_SERVER['TEST_EMAIL']) && trim($_SERVER['TEST_EMAIL']) != "") {
|
||||
$email = $_SERVER['TEST_EMAIL'];
|
||||
$subject = "PHP email test script";
|
||||
$message = "This is a test email to confirm that the PHP mail function works!";
|
||||
$headers = "From: " . $email;
|
||||
|
||||
mail($email, $subject, $message, $headers);
|
||||
}
|
||||
@@ -0,0 +1,13 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${NEWRELIC_LICENSE+x} ] && [ "$NEWRELIC_LICENSE" != "" ] ; then
|
||||
echo "env NEWRELIC_LICENSE: setting up newrelic license"
|
||||
sed -i "s/REPLACE_WITH_REAL_KEY/$NEWRELIC_LICENSE/g" /usr/local/etc/php/conf.d/newrelic.ini
|
||||
nrsysmond-config --set license_key=$NEWRELIC_LICENSE
|
||||
|
||||
service newrelic-sysmond start > /dev/null
|
||||
|
||||
chmod u+rw,g+rw,o+rw /var/log/newrelic/newrelic-daemon.log
|
||||
else
|
||||
rm -f /usr/local/etc/php/conf.d/newrelic.ini
|
||||
fi
|
||||
@@ -0,0 +1,38 @@
|
||||
#!/usr/local/bin/php
|
||||
<?php
|
||||
|
||||
/**
|
||||
* This script is a sendmail wrapper for php to log calls of the php mail() function.
|
||||
* Author: Till Brehm, www.ispconfig.org
|
||||
* (Hopefully) secured by David Goodwin <david @ _palepurple_.co.uk>
|
||||
* https://www.howtoforge.com/how-to-log-emails-sent-with-phps-mail-function-to-detect-form-spam
|
||||
*/
|
||||
|
||||
$sendmail_bin = '/usr/sbin/sendmail';
|
||||
|
||||
// Get the email content
|
||||
$mail = '';
|
||||
$logline = '';
|
||||
$pointer = fopen('php://stdin', 'r');
|
||||
|
||||
while ($line = fgets($pointer)) {
|
||||
if (preg_match('/^to:/i', $line) || preg_match('/^from:/i', $line)) {
|
||||
$logline .= trim($line) . ' ';
|
||||
}
|
||||
$mail .= $line;
|
||||
}
|
||||
|
||||
// Compose the sendmail command
|
||||
$command = 'echo ' . escapeshellarg($mail) . ' | ' . $sendmail_bin . ' -t -i';
|
||||
|
||||
if (isset($_SERVER['argc'])) {
|
||||
for ($i = 1; $i < $_SERVER['argc']; $i++) {
|
||||
$command .= escapeshellarg($_SERVER['argv'][$i]) . ' ';
|
||||
}
|
||||
}
|
||||
|
||||
// Write the log
|
||||
error_log("Email sent: " . $logline);
|
||||
|
||||
// Execute the command
|
||||
return shell_exec($command);
|
||||
@@ -0,0 +1,38 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${SENDGRID_API_KEY+x} ] && [ "$SENDGRID_API_KEY" != "" ]; then
|
||||
echo "env SMTP_LOGIN: sendgrid credentials for email routing";
|
||||
echo "[smtp.sendgrid.net]:2525 apikey:${SENDGRID_API_KEY}" > /etc/postfix/sasl_passwd
|
||||
|
||||
postmap /etc/postfix/sasl_passwd
|
||||
chmod 600 /etc/postfix/sasl_passwd.db
|
||||
rm /etc/postfix/sasl_passwd
|
||||
|
||||
### update email relay configuration for SendGrid
|
||||
sed -i 's/default_transport = error//g' /etc/postfix/main.cf
|
||||
sed -i 's/relay_transport = error//g' /etc/postfix/main.cf
|
||||
|
||||
### delete following lines if already exist before adding
|
||||
sed -i '/relayhost/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_tls_security_level/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_auth_enable/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_password_maps/d' /etc/postfix/main.cf
|
||||
sed -i '/header_size_limit/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_security_options/d' /etc/postfix/main.cf
|
||||
|
||||
### add following lines
|
||||
echo "relayhost = [smtp.sendgrid.net]:2525" >> /etc/postfix/main.cf
|
||||
echo "smtp_tls_security_level = encrypt" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_auth_enable = yes" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd" >> /etc/postfix/main.cf
|
||||
echo "header_size_limit = 4096000" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_security_options = noanonymous" >> /etc/postfix/main.cf
|
||||
|
||||
/etc/init.d/postfix start > /dev/null
|
||||
|
||||
### send test email if TEST_EMAIL env variable is set
|
||||
if [ ! -z ${TEST_EMAIL+x} ] && [ "$TEST_EMAIL" != "" ]; then
|
||||
echo " - sending test email to: [ $TEST_EMAIL ]";
|
||||
php /usr/local/bin/emailtest.php
|
||||
fi
|
||||
fi
|
||||
Executable
+8
@@ -0,0 +1,8 @@
|
||||
#!/bin/bash
|
||||
|
||||
### update PHP session handler
|
||||
if [ ! "$PHP_SESSION_HANDLER" == "" ] && [ ! "$PHP_SESSION_PATH" == "" ]; then
|
||||
echo "env PHP_SESSION_HANDLER: updating php session handler [ $PHP_SESSION_PATH ]"
|
||||
echo "session.save_handler = $PHP_SESSION_HANDLER" > /usr/local/etc/php/conf.d/zz-session.ini
|
||||
echo "session.save_path = \"$PHP_SESSION_PATH\"" >> /usr/local/etc/php/conf.d/zz-session.ini
|
||||
fi
|
||||
@@ -0,0 +1,16 @@
|
||||
PHP_UID=1000
|
||||
PHP_GID=1000
|
||||
PHP_HOME=/app
|
||||
PHP_USER=php-fpm
|
||||
# PHP_INI_SCAN_DIR=/cfgs:/usr/local/etc/php/conf.d
|
||||
PHP_INI_PATH=/cfgs/php.ini
|
||||
PHP_POOL_PATH=/cfgs/*/*-pool.conf
|
||||
PHP_BOOT_SCRIPTS=/cfgs/start.sh
|
||||
PHP_CRONTABS_PATH=/cfgs/cron
|
||||
PHP_SESSION_HANDLER=redis
|
||||
PHP_SESSION_PATH=tcp://redis.host:6379
|
||||
|
||||
# private
|
||||
TEST_EMAIL=name@domain.com
|
||||
NEWRELIC_LICENSE=newrelic_license
|
||||
SENDGRID_API_KEY=sendgrid_api_key
|
||||
@@ -0,0 +1 @@
|
||||
.env
|
||||
@@ -0,0 +1,157 @@
|
||||
FROM php:7.4-fpm
|
||||
|
||||
RUN apt-get update -y
|
||||
RUN apt-get -y install gcc make autoconf libc-dev pkg-config libzip-dev
|
||||
|
||||
RUN apt-get install -y --no-install-recommends \
|
||||
git \
|
||||
libmemcached-dev \
|
||||
libz-dev \
|
||||
libpq-dev \
|
||||
libssl-dev libssl-doc libsasl2-dev \
|
||||
libmcrypt-dev \
|
||||
libxml2-dev \
|
||||
zlib1g-dev libicu-dev g++ \
|
||||
libldap2-dev libbz2-dev \
|
||||
curl libcurl4-openssl-dev \
|
||||
libenchant-dev libgmp-dev firebird-dev libib-util \
|
||||
re2c libpng++-dev \
|
||||
libwebp-dev libjpeg-dev libjpeg62-turbo-dev libpng-dev libxpm-dev libvpx-dev libfreetype6-dev \
|
||||
libmagick++-dev \
|
||||
libmagickwand-dev \
|
||||
zlib1g-dev libgd-dev \
|
||||
libtidy-dev libxslt1-dev libmagic-dev libexif-dev file \
|
||||
sqlite3 libsqlite3-dev libxslt-dev \
|
||||
libmhash2 libmhash-dev libc-client-dev libkrb5-dev libssh2-1-dev \
|
||||
unzip libpcre3 libpcre3-dev \
|
||||
poppler-utils ghostscript libmagickwand-6.q16-dev libsnmp-dev libedit-dev libreadline6-dev libsodium-dev \
|
||||
freetds-bin freetds-dev freetds-common libct4 libsybdb5 tdsodbc libreadline-dev librecode-dev libpspell-dev libonig-dev
|
||||
|
||||
# fix for docker-php-ext-install pdo_dblib
|
||||
# https://stackoverflow.com/questions/43617752/docker-php-and-freetds-cannot-find-freetds-in-know-installation-directories
|
||||
RUN ln -s /usr/lib/x86_64-linux-gnu/libsybdb.so /usr/lib/
|
||||
|
||||
# RUN docker-php-ext-configure hash --with-mhash && \
|
||||
# docker-php-ext-install hash
|
||||
RUN docker-php-ext-configure imap --with-kerberos --with-imap-ssl && \
|
||||
docker-php-ext-install imap iconv
|
||||
|
||||
RUN docker-php-ext-install bcmath bz2 calendar ctype curl dba dom enchant
|
||||
RUN docker-php-ext-install fileinfo exif ftp gettext gmp
|
||||
RUN docker-php-ext-install intl json ldap mbstring mysqli
|
||||
RUN docker-php-ext-install opcache pcntl pspell
|
||||
RUN docker-php-ext-install pdo pdo_dblib pdo_mysql pdo_pgsql pdo_sqlite pgsql phar posix
|
||||
RUN docker-php-ext-install readline
|
||||
RUN docker-php-ext-install session shmop simplexml soap sockets sodium
|
||||
RUN docker-php-ext-install sysvmsg sysvsem sysvshm
|
||||
# RUN docker-php-ext-install snmp
|
||||
|
||||
# fix for docker-php-ext-install xmlreader
|
||||
# https://github.com/docker-library/php/issues/373
|
||||
RUN export CFLAGS="-I/usr/src/php" && docker-php-ext-install xmlreader xmlwriter xml xmlrpc xsl
|
||||
|
||||
RUN docker-php-ext-install tidy tokenizer zend_test zip
|
||||
|
||||
# already build in... what they say...
|
||||
# RUN docker-php-ext-install filter reflection spl standard
|
||||
# RUN docker-php-ext-install pdo_firebird pdo_oci
|
||||
|
||||
# install pecl extension
|
||||
RUN pecl install ds && \
|
||||
pecl install imagick && \
|
||||
pecl install igbinary && \
|
||||
pecl install memcached && \
|
||||
pecl install redis-5.1.0 && \
|
||||
pecl install mcrypt-1.0.3 && \
|
||||
docker-php-ext-enable ds imagick igbinary redis memcached
|
||||
|
||||
# https://serverpilot.io/docs/how-to-install-the-php-ssh2-extension
|
||||
# pecl install ssh2-1.1.2 && \
|
||||
# docker-php-ext-enable ssh2
|
||||
|
||||
# install pecl extension
|
||||
RUN pecl install mongodb && docker-php-ext-enable mongodb
|
||||
|
||||
# install xdebug
|
||||
# RUN pecl install xdebug && docker-php-ext-enable xdebug
|
||||
|
||||
RUN yes "" | pecl install msgpack && \
|
||||
docker-php-ext-enable msgpack
|
||||
|
||||
# install APCu
|
||||
RUN pecl install apcu && \
|
||||
docker-php-ext-enable apcu --ini-name docker-php-ext-10-apcu.ini
|
||||
|
||||
RUN apt-get update -y && apt-get install -y apt-transport-https locales gnupg
|
||||
|
||||
# install MSSQL support and ODBC driver
|
||||
# RUN curl https://packages.microsoft.com/keys/microsoft.asc | apt-key add - && \
|
||||
# curl https://packages.microsoft.com/config/debian/8/prod.list > /etc/apt/sources.list.d/mssql-release.list && \
|
||||
# export DEBIAN_FRONTEND=noninteractive && apt-get update -y && \
|
||||
# ACCEPT_EULA=Y apt-get install -y msodbcsql unixodbc-dev
|
||||
# RUN set -xe \
|
||||
# && pecl install pdo_sqlsrv \
|
||||
# && docker-php-ext-enable pdo_sqlsrv \
|
||||
# && apt-get purge -y unixodbc-dev && apt-get autoremove -y && apt-get clean
|
||||
|
||||
# RUN docker-php-ext-configure spl && docker-php-ext-install spl
|
||||
|
||||
# install GD
|
||||
RUN docker-php-ext-configure gd \
|
||||
# --with-png \
|
||||
--with-jpeg \
|
||||
--with-xpm \
|
||||
--with-webp \
|
||||
--with-freetype \
|
||||
&& docker-php-ext-install -j$(nproc) gd
|
||||
|
||||
# set locale to utf-8
|
||||
RUN echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && locale-gen
|
||||
ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en' LC_ALL='en_US.UTF-8'
|
||||
|
||||
#--------------------------------------------------------------------------
|
||||
# Final Touches
|
||||
#--------------------------------------------------------------------------
|
||||
|
||||
# install required libs for health check
|
||||
RUN apt-get -y install libfcgi0ldbl nano htop iotop lsof cron mariadb-client redis-tools wget
|
||||
|
||||
# install composer
|
||||
RUN EXPECTED_CHECKSUM="$(wget -q -O - https://composer.github.io/installer.sig)" && \
|
||||
php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" && \
|
||||
ACTUAL_CHECKSUM="$(php -r "echo hash_file('sha384', 'composer-setup.php');")" && \
|
||||
if [ "$EXPECTED_CHECKSUM" != "$ACTUAL_CHECKSUM" ]; then >&2 echo 'ERROR: Invalid installer checksum' && exit 1; fi
|
||||
|
||||
RUN php composer-setup.php --quiet && rm composer-setup.php && \
|
||||
mv composer.phar /usr/local/sbin/composer && \
|
||||
chmod +x /usr/local/sbin/composer
|
||||
|
||||
# install NewRelic agent
|
||||
RUN echo 'deb http://apt.newrelic.com/debian/ newrelic non-free' | tee /etc/apt/sources.list.d/newrelic.list && \
|
||||
curl https://download.newrelic.com/548C16BF.gpg | apt-key add - && \
|
||||
apt-get -y update && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get -y install newrelic-php5 newrelic-sysmond && \
|
||||
export NR_INSTALL_SILENT=1 && newrelic-install install
|
||||
|
||||
# install SendGrid
|
||||
RUN echo "postfix postfix/mailname string localhost" | debconf-set-selections && \
|
||||
echo "postfix postfix/main_mailer_type string 'Internet Site'" | debconf-set-selections && \
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install postfix libsasl2-modules -y
|
||||
|
||||
# Set default work directory
|
||||
ADD scripts/* /usr/local/bin/
|
||||
RUN chmod +x /usr/local/bin/*
|
||||
|
||||
# Add default configuration files
|
||||
ADD configs/php.ini /usr/local/etc/php/
|
||||
ADD configs/www.conf /usr/local/etc/php-fpm.d/
|
||||
|
||||
# Health check
|
||||
RUN echo '#!/bin/bash' > /healthcheck && \
|
||||
echo 'env -i SCRIPT_NAME=/health SCRIPT_FILENAME=/health REQUEST_METHOD=GET cgi-fcgi -bind -connect 127.0.0.1:9000 || exit 1' >> /healthcheck && \
|
||||
chmod +x /healthcheck
|
||||
|
||||
# Clean up
|
||||
RUN apt-get remove -y git && apt-get autoremove -y && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
||||
|
||||
WORKDIR /
|
||||
Executable
+1
@@ -0,0 +1 @@
|
||||
* * * * * root /cfgs/job.sh
|
||||
Executable
+2
@@ -0,0 +1,2 @@
|
||||
#!/bin/bash
|
||||
echo "[ cronjob task ] executed at `date`" > /proc/1/fd/2
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,2 @@
|
||||
#!/bin/bash
|
||||
echo "[ start.sh ] Boot script test..." > /proc/1/fd/2
|
||||
@@ -0,0 +1,423 @@
|
||||
; Start a new pool named 'www'.
|
||||
; the variable $pool can be used in any directive and will be replaced by the
|
||||
; pool name ('www' here)
|
||||
[www]
|
||||
|
||||
; Per pool prefix
|
||||
; It only applies on the following directives:
|
||||
; - 'access.log'
|
||||
; - 'slowlog'
|
||||
; - 'listen' (unixsocket)
|
||||
; - 'chroot'
|
||||
; - 'chdir'
|
||||
; - 'php_values'
|
||||
; - 'php_admin_values'
|
||||
; When not set, the global prefix (or NONE) applies instead.
|
||||
; Note: This directive can also be relative to the global prefix.
|
||||
; Default Value: none
|
||||
;prefix = /path/to/pools/$pool
|
||||
|
||||
; Unix user/group of processes
|
||||
; Note: The user is mandatory. If the group is not set, the default user's group
|
||||
; will be used.
|
||||
user = www-data
|
||||
group = www-data
|
||||
|
||||
; The address on which to accept FastCGI requests.
|
||||
; Valid syntaxes are:
|
||||
; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on
|
||||
; a specific port;
|
||||
; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on
|
||||
; a specific port;
|
||||
; 'port' - to listen on a TCP socket to all addresses
|
||||
; (IPv6 and IPv4-mapped) on a specific port;
|
||||
; '/path/to/unix/socket' - to listen on a unix socket.
|
||||
; Note: This value is mandatory.
|
||||
listen = 9000
|
||||
|
||||
; Set listen(2) backlog.
|
||||
; Default Value: 511 (-1 on FreeBSD and OpenBSD)
|
||||
;listen.backlog = 511
|
||||
|
||||
; Set permissions for unix socket, if one is used. In Linux, read/write
|
||||
; permissions must be set in order to allow connections from a web server. Many
|
||||
; BSD-derived systems allow connections regardless of permissions.
|
||||
; Default Values: user and group are set as the running user
|
||||
; mode is set to 0660
|
||||
;listen.owner = www-data
|
||||
;listen.group = www-data
|
||||
;listen.mode = 0660
|
||||
; When POSIX Access Control Lists are supported you can set them using
|
||||
; these options, value is a comma separated list of user/group names.
|
||||
; When set, listen.owner and listen.group are ignored
|
||||
;listen.acl_users =
|
||||
;listen.acl_groups =
|
||||
|
||||
; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect.
|
||||
; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original
|
||||
; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address
|
||||
; must be separated by a comma. If this value is left blank, connections will be
|
||||
; accepted from any ip address.
|
||||
; Default Value: any
|
||||
;listen.allowed_clients = 127.0.0.1
|
||||
|
||||
; Specify the nice(2) priority to apply to the pool processes (only if set)
|
||||
; The value can vary from -19 (highest priority) to 20 (lower priority)
|
||||
; Note: - It will only work if the FPM master process is launched as root
|
||||
; - The pool processes will inherit the master process priority
|
||||
; unless it specified otherwise
|
||||
; Default Value: no set
|
||||
; process.priority = -19
|
||||
|
||||
; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user
|
||||
; or group is differrent than the master process user. It allows to create process
|
||||
; core dump and ptrace the process for the pool user.
|
||||
; Default Value: no
|
||||
; process.dumpable = yes
|
||||
|
||||
; Choose how the process manager will control the number of child processes.
|
||||
; Possible Values:
|
||||
; static - a fixed number (pm.max_children) of child processes;
|
||||
; dynamic - the number of child processes are set dynamically based on the
|
||||
; following directives. With this process management, there will be
|
||||
; always at least 1 children.
|
||||
; pm.max_children - the maximum number of children that can
|
||||
; be alive at the same time.
|
||||
; pm.start_servers - the number of children created on startup.
|
||||
; pm.min_spare_servers - the minimum number of children in 'idle'
|
||||
; state (waiting to process). If the number
|
||||
; of 'idle' processes is less than this
|
||||
; number then some children will be created.
|
||||
; pm.max_spare_servers - the maximum number of children in 'idle'
|
||||
; state (waiting to process). If the number
|
||||
; of 'idle' processes is greater than this
|
||||
; number then some children will be killed.
|
||||
; ondemand - no children are created at startup. Children will be forked when
|
||||
; new requests will connect. The following parameter are used:
|
||||
; pm.max_children - the maximum number of children that
|
||||
; can be alive at the same time.
|
||||
; pm.process_idle_timeout - The number of seconds after which
|
||||
; an idle process will be killed.
|
||||
; Note: This value is mandatory.
|
||||
pm = dynamic
|
||||
|
||||
; The number of child processes to be created when pm is set to 'static' and the
|
||||
; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'.
|
||||
; This value sets the limit on the number of simultaneous requests that will be
|
||||
; served. Equivalent to the ApacheMaxClients directive with mpm_prefork.
|
||||
; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP
|
||||
; CGI. The below defaults are based on a server without much resources. Don't
|
||||
; forget to tweak pm.* to fit your needs.
|
||||
; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand'
|
||||
; Note: This value is mandatory.
|
||||
pm.max_children = 5
|
||||
|
||||
; The number of child processes created on startup.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2
|
||||
pm.start_servers = 2
|
||||
|
||||
; The desired minimum number of idle server processes.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Note: Mandatory when pm is set to 'dynamic'
|
||||
pm.min_spare_servers = 1
|
||||
|
||||
; The desired maximum number of idle server processes.
|
||||
; Note: Used only when pm is set to 'dynamic'
|
||||
; Note: Mandatory when pm is set to 'dynamic'
|
||||
pm.max_spare_servers = 3
|
||||
|
||||
; The number of seconds after which an idle process will be killed.
|
||||
; Note: Used only when pm is set to 'ondemand'
|
||||
; Default Value: 10s
|
||||
;pm.process_idle_timeout = 10s;
|
||||
|
||||
; The number of requests each child process should execute before respawning.
|
||||
; This can be useful to work around memory leaks in 3rd party libraries. For
|
||||
; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS.
|
||||
; Default Value: 0
|
||||
;pm.max_requests = 500
|
||||
|
||||
; The URI to view the FPM status page. If this value is not set, no URI will be
|
||||
; recognized as a status page. It shows the following informations:
|
||||
; pool - the name of the pool;
|
||||
; process manager - static, dynamic or ondemand;
|
||||
; start time - the date and time FPM has started;
|
||||
; start since - number of seconds since FPM has started;
|
||||
; accepted conn - the number of request accepted by the pool;
|
||||
; listen queue - the number of request in the queue of pending
|
||||
; connections (see backlog in listen(2));
|
||||
; max listen queue - the maximum number of requests in the queue
|
||||
; of pending connections since FPM has started;
|
||||
; listen queue len - the size of the socket queue of pending connections;
|
||||
; idle processes - the number of idle processes;
|
||||
; active processes - the number of active processes;
|
||||
; total processes - the number of idle + active processes;
|
||||
; max active processes - the maximum number of active processes since FPM
|
||||
; has started;
|
||||
; max children reached - number of times, the process limit has been reached,
|
||||
; when pm tries to start more children (works only for
|
||||
; pm 'dynamic' and 'ondemand');
|
||||
; Value are updated in real time.
|
||||
; Example output:
|
||||
; pool: www
|
||||
; process manager: static
|
||||
; start time: 01/Jul/2011:17:53:49 +0200
|
||||
; start since: 62636
|
||||
; accepted conn: 190460
|
||||
; listen queue: 0
|
||||
; max listen queue: 1
|
||||
; listen queue len: 42
|
||||
; idle processes: 4
|
||||
; active processes: 11
|
||||
; total processes: 15
|
||||
; max active processes: 12
|
||||
; max children reached: 0
|
||||
;
|
||||
; By default the status page output is formatted as text/plain. Passing either
|
||||
; 'html', 'xml' or 'json' in the query string will return the corresponding
|
||||
; output syntax. Example:
|
||||
; http://www.foo.bar/status
|
||||
; http://www.foo.bar/status?json
|
||||
; http://www.foo.bar/status?html
|
||||
; http://www.foo.bar/status?xml
|
||||
;
|
||||
; By default the status page only outputs short status. Passing 'full' in the
|
||||
; query string will also return status for each pool process.
|
||||
; Example:
|
||||
; http://www.foo.bar/status?full
|
||||
; http://www.foo.bar/status?json&full
|
||||
; http://www.foo.bar/status?html&full
|
||||
; http://www.foo.bar/status?xml&full
|
||||
; The Full status returns for each process:
|
||||
; pid - the PID of the process;
|
||||
; state - the state of the process (Idle, Running, ...);
|
||||
; start time - the date and time the process has started;
|
||||
; start since - the number of seconds since the process has started;
|
||||
; requests - the number of requests the process has served;
|
||||
; request duration - the duration in µs of the requests;
|
||||
; request method - the request method (GET, POST, ...);
|
||||
; request URI - the request URI with the query string;
|
||||
; content length - the content length of the request (only with POST);
|
||||
; user - the user (PHP_AUTH_USER) (or '-' if not set);
|
||||
; script - the main script called (or '-' if not set);
|
||||
; last request cpu - the %cpu the last request consumed
|
||||
; it's always 0 if the process is not in Idle state
|
||||
; because CPU calculation is done when the request
|
||||
; processing has terminated;
|
||||
; last request memory - the max amount of memory the last request consumed
|
||||
; it's always 0 if the process is not in Idle state
|
||||
; because memory calculation is done when the request
|
||||
; processing has terminated;
|
||||
; If the process is in Idle state, then informations are related to the
|
||||
; last request the process has served. Otherwise informations are related to
|
||||
; the current request being served.
|
||||
; Example output:
|
||||
; ************************
|
||||
; pid: 31330
|
||||
; state: Running
|
||||
; start time: 01/Jul/2011:17:53:49 +0200
|
||||
; start since: 63087
|
||||
; requests: 12808
|
||||
; request duration: 1250261
|
||||
; request method: GET
|
||||
; request URI: /test_mem.php?N=10000
|
||||
; content length: 0
|
||||
; user: -
|
||||
; script: /home/fat/web/docs/php/test_mem.php
|
||||
; last request cpu: 0.00
|
||||
; last request memory: 0
|
||||
;
|
||||
; Note: There is a real-time FPM status monitoring sample web page available
|
||||
; It's available in: /usr/local/share/php/fpm/status.html
|
||||
;
|
||||
; Note: The value must start with a leading slash (/). The value can be
|
||||
; anything, but it may not be a good idea to use the .php extension or it
|
||||
; may conflict with a real PHP file.
|
||||
; Default Value: not set
|
||||
pm.status_path = /status
|
||||
|
||||
; The ping URI to call the monitoring page of FPM. If this value is not set, no
|
||||
; URI will be recognized as a ping page. This could be used to test from outside
|
||||
; that FPM is alive and responding, or to
|
||||
; - create a graph of FPM availability (rrd or such);
|
||||
; - remove a server from a group if it is not responding (load balancing);
|
||||
; - trigger alerts for the operating team (24/7).
|
||||
; Note: The value must start with a leading slash (/). The value can be
|
||||
; anything, but it may not be a good idea to use the .php extension or it
|
||||
; may conflict with a real PHP file.
|
||||
; Default Value: not set
|
||||
ping.path = /health
|
||||
|
||||
; This directive may be used to customize the response of a ping request. The
|
||||
; response is formatted as text/plain with a 200 response code.
|
||||
; Default Value: pong
|
||||
ping.response = OK
|
||||
|
||||
; The access log file
|
||||
; Default: not set
|
||||
;access.log = log/$pool.access.log
|
||||
|
||||
; The access log format.
|
||||
; The following syntax is allowed
|
||||
; %%: the '%' character
|
||||
; %C: %CPU used by the request
|
||||
; it can accept the following format:
|
||||
; - %{user}C for user CPU only
|
||||
; - %{system}C for system CPU only
|
||||
; - %{total}C for user + system CPU (default)
|
||||
; %d: time taken to serve the request
|
||||
; it can accept the following format:
|
||||
; - %{seconds}d (default)
|
||||
; - %{miliseconds}d
|
||||
; - %{mili}d
|
||||
; - %{microseconds}d
|
||||
; - %{micro}d
|
||||
; %e: an environment variable (same as $_ENV or $_SERVER)
|
||||
; it must be associated with embraces to specify the name of the env
|
||||
; variable. Some exemples:
|
||||
; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e
|
||||
; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e
|
||||
; %f: script filename
|
||||
; %l: content-length of the request (for POST request only)
|
||||
; %m: request method
|
||||
; %M: peak of memory allocated by PHP
|
||||
; it can accept the following format:
|
||||
; - %{bytes}M (default)
|
||||
; - %{kilobytes}M
|
||||
; - %{kilo}M
|
||||
; - %{megabytes}M
|
||||
; - %{mega}M
|
||||
; %n: pool name
|
||||
; %o: output header
|
||||
; it must be associated with embraces to specify the name of the header:
|
||||
; - %{Content-Type}o
|
||||
; - %{X-Powered-By}o
|
||||
; - %{Transfert-Encoding}o
|
||||
; - ....
|
||||
; %p: PID of the child that serviced the request
|
||||
; %P: PID of the parent of the child that serviced the request
|
||||
; %q: the query string
|
||||
; %Q: the '?' character if query string exists
|
||||
; %r: the request URI (without the query string, see %q and %Q)
|
||||
; %R: remote IP address
|
||||
; %s: status (response code)
|
||||
; %t: server time the request was received
|
||||
; it can accept a strftime(3) format:
|
||||
; %d/%b/%Y:%H:%M:%S %z (default)
|
||||
; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
|
||||
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
|
||||
; %T: time the log has been written (the request has finished)
|
||||
; it can accept a strftime(3) format:
|
||||
; %d/%b/%Y:%H:%M:%S %z (default)
|
||||
; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag
|
||||
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t
|
||||
; %u: remote user
|
||||
;
|
||||
; Default: "%R - %u %t \"%m %r\" %s"
|
||||
;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
|
||||
|
||||
; The log file for slow requests
|
||||
; Default Value: not set
|
||||
; Note: slowlog is mandatory if request_slowlog_timeout is set
|
||||
;slowlog = log/$pool.log.slow
|
||||
|
||||
; The timeout for serving a single request after which a PHP backtrace will be
|
||||
; dumped to the 'slowlog' file. A value of '0s' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
;request_slowlog_timeout = 0
|
||||
|
||||
; Depth of slow log stack trace.
|
||||
; Default Value: 20
|
||||
;request_slowlog_trace_depth = 20
|
||||
|
||||
; The timeout for serving a single request after which the worker process will
|
||||
; be killed. This option should be used when the 'max_execution_time' ini option
|
||||
; does not stop script execution for some reason. A value of '0' means 'off'.
|
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
|
||||
; Default Value: 0
|
||||
request_terminate_timeout = 360
|
||||
|
||||
; Set open file descriptor rlimit.
|
||||
; Default Value: system defined value
|
||||
rlimit_files = 131072
|
||||
|
||||
; Set max core size rlimit.
|
||||
; Possible Values: 'unlimited' or an integer greater or equal to 0
|
||||
; Default Value: system defined value
|
||||
rlimit_core = unlimited
|
||||
|
||||
; Chroot to this directory at the start. This value must be defined as an
|
||||
; absolute path. When this value is not set, chroot is not used.
|
||||
; Note: you can prefix with '$prefix' to chroot to the pool prefix or one
|
||||
; of its subdirectories. If the pool prefix is not set, the global prefix
|
||||
; will be used instead.
|
||||
; Note: chrooting is a great security feature and should be used whenever
|
||||
; possible. However, all PHP paths will be relative to the chroot
|
||||
; (error_log, sessions.save_path, ...).
|
||||
; Default Value: not set
|
||||
;chroot =
|
||||
|
||||
; Chdir to this directory at the start.
|
||||
; Note: relative path can be used.
|
||||
; Default Value: current directory or / when chroot
|
||||
;chdir = /var/www
|
||||
|
||||
; Redirect worker stdout and stderr into main error log. If not set, stdout and
|
||||
; stderr will be redirected to /dev/null according to FastCGI specs.
|
||||
; Note: on highloaded environement, this can cause some delay in the page
|
||||
; process time (several ms).
|
||||
; Default Value: no
|
||||
catch_workers_output = yes
|
||||
|
||||
; Clear environment in FPM workers
|
||||
; Prevents arbitrary environment variables from reaching FPM worker processes
|
||||
; by clearing the environment in workers before env vars specified in this
|
||||
; pool configuration are added.
|
||||
; Setting to "no" will make all environment variables available to PHP code
|
||||
; via getenv(), $_ENV and $_SERVER.
|
||||
; Default Value: yes
|
||||
;clear_env = no
|
||||
|
||||
; Limits the extensions of the main script FPM will allow to parse. This can
|
||||
; prevent configuration mistakes on the web server side. You should only limit
|
||||
; FPM to .php extensions to prevent malicious users to use other extensions to
|
||||
; execute php code.
|
||||
; Note: set an empty value to allow all extensions.
|
||||
; Default Value: .php
|
||||
;security.limit_extensions = .php .php3 .php4 .php5 .php7
|
||||
|
||||
; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
|
||||
; the current environment.
|
||||
; Default Value: clean env
|
||||
;env[HOSTNAME] = $HOSTNAME
|
||||
;env[PATH] = /usr/local/bin:/usr/bin:/bin
|
||||
;env[TMP] = /tmp
|
||||
;env[TMPDIR] = /tmp
|
||||
;env[TEMP] = /tmp
|
||||
|
||||
; Additional php.ini defines, specific to this pool of workers. These settings
|
||||
; overwrite the values previously defined in the php.ini. The directives are the
|
||||
; same as the PHP SAPI:
|
||||
; php_value/php_flag - you can set classic ini defines which can
|
||||
; be overwritten from PHP call 'ini_set'.
|
||||
; php_admin_value/php_admin_flag - these directives won't be overwritten by
|
||||
; PHP call 'ini_set'
|
||||
; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no.
|
||||
|
||||
; Defining 'extension' will load the corresponding shared extension from
|
||||
; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
|
||||
; overwrite previously defined php.ini values, but will append the new value
|
||||
; instead.
|
||||
|
||||
; Note: path INI options can be relative and will be expanded with the prefix
|
||||
; (pool, global or /usr/local)
|
||||
|
||||
; Default Value: nothing is defined by default except the values in php.ini and
|
||||
; specified at startup with the -d argument
|
||||
;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
|
||||
;php_flag[display_errors] = off
|
||||
;php_admin_value[error_log] = /var/log/fpm-php.www.log
|
||||
;php_admin_flag[log_errors] = on
|
||||
;php_admin_value[memory_limit] = 32M
|
||||
@@ -0,0 +1,17 @@
|
||||
version: "3"
|
||||
|
||||
services:
|
||||
php73:
|
||||
build:
|
||||
context: ./
|
||||
dockerfile: Dockerfile
|
||||
depends_on:
|
||||
- redis
|
||||
hostname: php73
|
||||
container_name: php73
|
||||
volumes:
|
||||
- ./configs:/cfgs
|
||||
env_file: .env
|
||||
|
||||
redis:
|
||||
image: redis:latest
|
||||
Executable
+15
@@ -0,0 +1,15 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! "$PHP_CRONTABS_PATH" == "" ]; then
|
||||
echo "env CRONTABS_PATH: setting up crontabs [ $PHP_CRONTABS_PATH ]:";
|
||||
for f in ${PHP_CRONTABS_PATH}; do
|
||||
echo " - $f";
|
||||
rm -f /etc/cron.d/${f##*/}
|
||||
cp $f /etc/cron.d/
|
||||
chmod 0644 /etc/cron.d/${f##*/}
|
||||
done
|
||||
|
||||
touch /var/log/cron.log
|
||||
printenv | grep -v "no_proxy" >> /etc/default/locale
|
||||
/etc/init.d/cron start > /dev/null
|
||||
fi
|
||||
@@ -0,0 +1,86 @@
|
||||
#!/bin/bash
|
||||
|
||||
echo "[`date +"%d-%b-%Y %T"`] PHP-FPM Docker container boot"
|
||||
|
||||
### create system user for php pool
|
||||
if [ ! "$PHP_USER" == "" ] && [ ! "$PHP_UID" == "" ] && [ ! "$PHP_GID" == "" ] && [ ! "$PHP_HOME" == "" ]; then
|
||||
echo "env PHP_USER: creating new system user: ${PHP_USER} ${PHP_UID}:${PHP_GID} ${PHP_HOME}"
|
||||
mkdir -p $PHP_HOME && \
|
||||
groupadd -f $PHP_USER -g $PHP_GID && \
|
||||
useradd -d $PHP_HOME -u $PHP_UID -g $PHP_GID -s /usr/sbin/nologin $PHP_USER
|
||||
fi
|
||||
|
||||
|
||||
### load PHP ini configurations
|
||||
if [ ! "$PHP_INI_PATH" == "" ]; then
|
||||
echo "env PHP_INI_PATH: copy from [ $PHP_INI_PATH ] into [ /usr/local/etc/php/conf.d/ ] folder"
|
||||
for f in ${PHP_INI_PATH}; do
|
||||
echo " - $f";
|
||||
rm -f /usr/local/etc/php/conf.d/${f##*/}
|
||||
cp $f /usr/local/etc/php/conf.d/
|
||||
done
|
||||
fi
|
||||
|
||||
|
||||
### make sure to create clean php-fpm.conf
|
||||
### to avoid adding multiple times the same lines next
|
||||
### in case container is restarting
|
||||
echo "[global]" > /usr/local/etc/php-fpm.conf
|
||||
echo "include=etc/php-fpm.d/*.conf" >> /usr/local/etc/php-fpm.conf
|
||||
|
||||
### load PHP-FPM pool configurations
|
||||
if [ ! "$PHP_POOL_PATH" == "" ]; then
|
||||
echo "env PHP_POOL_PATH: copy from [ $PHP_POOL_PATH ] into [ /usr/local/etc/php-fpm.d/ ] folder"
|
||||
for f in ${PHP_POOL_PATH}; do
|
||||
echo " - $f";
|
||||
rm -f /usr/local/etc/php-fpm.d/${f##*/}
|
||||
cp $f /usr/local/etc/php-fpm.d/
|
||||
done
|
||||
fi
|
||||
|
||||
|
||||
### scan for config files in folders from PHP_INI_SCAN_DIR
|
||||
if [ ! -z ${PHP_INI_SCAN_DIR+x} ] && [ "$PHP_INI_SCAN_DIR" != "" ] ; then
|
||||
echo "env PHP_INI_SCAN_DIR: copy from [ $PHP_INI_SCAN_DIR ] into [ /usr/local/etc/php-fpm.d/ ] folder"
|
||||
|
||||
### break down path by : separator
|
||||
IFS=':' read -ra DIRECTORIES <<< "$PHP_INI_SCAN_DIR"
|
||||
|
||||
for DIR in "${DIRECTORIES[@]}"; do
|
||||
### check if there are any php pool configuration files to copy
|
||||
COUNT=`ls -1 $DIR/*.conf 2>/dev/null | wc -l`
|
||||
|
||||
if [ $COUNT != "0" ] ; then
|
||||
echo " - $DIR/*.conf";
|
||||
cp -f $DIR/*.conf /usr/local/etc/php-fpm.d/
|
||||
fi
|
||||
done
|
||||
fi
|
||||
|
||||
|
||||
### load boot bash scripts
|
||||
for f in /usr/local/bin/*.sh; do
|
||||
/bin/bash -c $f
|
||||
done
|
||||
|
||||
### load additional on-demand scripts
|
||||
if [ ! -z ${PHP_BOOT_SCRIPTS+x} ] && [ "$PHP_BOOT_SCRIPTS" != "" ]; then
|
||||
echo "env PHP_BOOT_SCRIPTS: executing scripts in [ $PHP_BOOT_SCRIPTS ]"
|
||||
|
||||
for f in ${PHP_BOOT_SCRIPTS}; do
|
||||
echo " - $f";
|
||||
|
||||
rm -f /usr/local/bin/${f##*/}
|
||||
cp $f /usr/local/bin/
|
||||
|
||||
chmod +x /usr/local/bin/${f##*/}
|
||||
done
|
||||
|
||||
for f in ${PHP_BOOT_SCRIPTS}; do
|
||||
/bin/bash -c /usr/local/bin/${f##*/}
|
||||
done
|
||||
fi
|
||||
|
||||
### expose php version
|
||||
echo
|
||||
/usr/local/bin/php -v
|
||||
@@ -0,0 +1,11 @@
|
||||
#!/bin/sh
|
||||
set -e
|
||||
|
||||
/usr/local/bin/docker-boot
|
||||
|
||||
# first arg is `-f` or `--some-option`
|
||||
if [ "${1#-}" != "$1" ]; then
|
||||
set -- php-fpm "$@"
|
||||
fi
|
||||
|
||||
exec "$@"
|
||||
@@ -0,0 +1,10 @@
|
||||
<?php
|
||||
|
||||
if (isset($_SERVER['TEST_EMAIL']) && trim($_SERVER['TEST_EMAIL']) != "") {
|
||||
$email = $_SERVER['TEST_EMAIL'];
|
||||
$subject = "PHP email test script";
|
||||
$message = "This is a test email to confirm that the PHP mail function works!";
|
||||
$headers = "From: " . $email;
|
||||
|
||||
mail($email, $subject, $message, $headers);
|
||||
}
|
||||
@@ -0,0 +1,13 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${NEWRELIC_LICENSE+x} ] && [ "$NEWRELIC_LICENSE" != "" ] ; then
|
||||
echo "env NEWRELIC_LICENSE: setting up newrelic license"
|
||||
sed -i "s/REPLACE_WITH_REAL_KEY/$NEWRELIC_LICENSE/g" /usr/local/etc/php/conf.d/newrelic.ini
|
||||
nrsysmond-config --set license_key=$NEWRELIC_LICENSE
|
||||
|
||||
service newrelic-sysmond start > /dev/null
|
||||
|
||||
chmod u+rw,g+rw,o+rw /var/log/newrelic/newrelic-daemon.log
|
||||
else
|
||||
rm -f /usr/local/etc/php/conf.d/newrelic.ini
|
||||
fi
|
||||
@@ -0,0 +1,38 @@
|
||||
#!/usr/local/bin/php
|
||||
<?php
|
||||
|
||||
/**
|
||||
* This script is a sendmail wrapper for php to log calls of the php mail() function.
|
||||
* Author: Till Brehm, www.ispconfig.org
|
||||
* (Hopefully) secured by David Goodwin <david @ _palepurple_.co.uk>
|
||||
* https://www.howtoforge.com/how-to-log-emails-sent-with-phps-mail-function-to-detect-form-spam
|
||||
*/
|
||||
|
||||
$sendmail_bin = '/usr/sbin/sendmail';
|
||||
|
||||
// Get the email content
|
||||
$mail = '';
|
||||
$logline = '';
|
||||
$pointer = fopen('php://stdin', 'r');
|
||||
|
||||
while ($line = fgets($pointer)) {
|
||||
if (preg_match('/^to:/i', $line) || preg_match('/^from:/i', $line)) {
|
||||
$logline .= trim($line) . ' ';
|
||||
}
|
||||
$mail .= $line;
|
||||
}
|
||||
|
||||
// Compose the sendmail command
|
||||
$command = 'echo ' . escapeshellarg($mail) . ' | ' . $sendmail_bin . ' -t -i';
|
||||
|
||||
if (isset($_SERVER['argc'])) {
|
||||
for ($i = 1; $i < $_SERVER['argc']; $i++) {
|
||||
$command .= escapeshellarg($_SERVER['argv'][$i]) . ' ';
|
||||
}
|
||||
}
|
||||
|
||||
// Write the log
|
||||
error_log("Email sent: " . $logline);
|
||||
|
||||
// Execute the command
|
||||
return shell_exec($command);
|
||||
@@ -0,0 +1,38 @@
|
||||
#!/bin/bash
|
||||
|
||||
if [ ! -z ${SENDGRID_API_KEY+x} ] && [ "$SENDGRID_API_KEY" != "" ]; then
|
||||
echo "env SENDGRID_API_KEY: sendgrid credentials for email routing";
|
||||
echo "[smtp.sendgrid.net]:2525 apikey:${SENDGRID_API_KEY}" > /etc/postfix/sasl_passwd
|
||||
|
||||
postmap /etc/postfix/sasl_passwd
|
||||
chmod 600 /etc/postfix/sasl_passwd.db
|
||||
rm /etc/postfix/sasl_passwd
|
||||
|
||||
### update email relay configuration for SendGrid
|
||||
sed -i 's/default_transport = error//g' /etc/postfix/main.cf
|
||||
sed -i 's/relay_transport = error//g' /etc/postfix/main.cf
|
||||
|
||||
### delete following lines if already exist before adding
|
||||
sed -i '/relayhost/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_tls_security_level/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_auth_enable/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_password_maps/d' /etc/postfix/main.cf
|
||||
sed -i '/header_size_limit/d' /etc/postfix/main.cf
|
||||
sed -i '/smtp_sasl_security_options/d' /etc/postfix/main.cf
|
||||
|
||||
### add following lines
|
||||
echo "relayhost = [smtp.sendgrid.net]:2525" >> /etc/postfix/main.cf
|
||||
echo "smtp_tls_security_level = encrypt" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_auth_enable = yes" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd" >> /etc/postfix/main.cf
|
||||
echo "header_size_limit = 4096000" >> /etc/postfix/main.cf
|
||||
echo "smtp_sasl_security_options = noanonymous" >> /etc/postfix/main.cf
|
||||
|
||||
/etc/init.d/postfix start > /dev/null
|
||||
|
||||
### send test email if TEST_EMAIL env variable is set
|
||||
if [ ! -z ${TEST_EMAIL+x} ] && [ "$TEST_EMAIL" != "" ]; then
|
||||
echo " - sending test email to: [ $TEST_EMAIL ]";
|
||||
php /usr/local/bin/emailtest.php
|
||||
fi
|
||||
fi
|
||||
Executable
+8
@@ -0,0 +1,8 @@
|
||||
#!/bin/bash
|
||||
|
||||
### update PHP session handler
|
||||
if [ ! "$PHP_SESSION_HANDLER" == "" ] && [ ! "$PHP_SESSION_PATH" == "" ]; then
|
||||
echo "env PHP_SESSION_HANDLER: updating php session handler [ $PHP_SESSION_PATH ]"
|
||||
echo "session.save_handler = $PHP_SESSION_HANDLER" > /usr/local/etc/php/conf.d/zz-session.ini
|
||||
echo "session.save_path = \"$PHP_SESSION_PATH\"" >> /usr/local/etc/php/conf.d/zz-session.ini
|
||||
fi
|
||||
@@ -0,0 +1,16 @@
|
||||
PHP_UID=1000
|
||||
PHP_GID=1000
|
||||
PHP_HOME=/app
|
||||
PHP_USER=php-fpm
|
||||
# PHP_INI_SCAN_DIR=/cfgs:/usr/local/etc/php/conf.d
|
||||
PHP_INI_PATH=/cfgs/php.ini
|
||||
PHP_POOL_PATH=/cfgs/*/*-pool.conf
|
||||
PHP_BOOT_SCRIPTS=/cfgs/start.sh
|
||||
PHP_CRONTABS_PATH=/cfgs/cron
|
||||
PHP_SESSION_HANDLER=redis
|
||||
PHP_SESSION_PATH=tcp://redis.host:6379
|
||||
|
||||
# private
|
||||
TEST_EMAIL=name@domain.com
|
||||
NEWRELIC_LICENSE=newrelic_license
|
||||
SENDGRID_API_KEY=sendgrid_api_key
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user