Dockerfile

FROM trafex/php-nginx:latest AS base

  WORKDIR /var/www/catalyst

  USER root

  RUN apk add --no-cache php82-pdo_mysql

  RUN sed -i '/\[www\]/a security.limit_extensions=.php .js .css' ${PHP_INI_DIR}/php-fpm.d/www.conf

  RUN sed -i 's/upload_max_filesize\s*=.*/upload_max_filesize=25M/' ${PHP_INI_DIR}/php.ini
  RUN sed -i 's/post_max_size\s*=.*/post_max_size=25M/' ${PHP_INI_DIR}/php.ini
  RUN sed -i 's/max_input_vars\s*=.*/max_input_vars=1000000/' ${PHP_INI_DIR}/php.ini
  RUN sed -i 's/max_file_uploads\s*=.*/max_file_uploads=1000000/' ${PHP_INI_DIR}/php.ini

# install dependencies
FROM composer AS composer

  WORKDIR /
  COPY src/php/composer.json .
  COPY src/php/composer.lock .

  RUN composer install --optimize-autoloader --no-interaction --no-progress

# prep
FROM base AS with-deps

  COPY src src
  COPY --from=composer /vendor src/php/vendor

  COPY api api
  COPY internal_assets internal_assets
  COPY www www

  COPY nginx.conf /etc/nginx/conf.d/default.conf

  # We require UID 1000. Don't love this, but here we are.
  RUN adduser -D -u 1000 --ingroup www-data www-data

  # Make sure files/folders needed by the processes are accessable when they run under the nobody user
  RUN chown -R www-data.www-data /var/www/html /run /var/lib/nginx /var/log/nginx

  USER www-data

  # db
  ENV DB_HOST=mariadb
  ENV DB_PORT=3306
  ENV DB_USER=mariadb
  ENV DB_PASS=mariadb
  ENV DB_NAME=catalyst

  # recaptcha; not used when DEVEL=false, so we provide stupid defaults
  ENV EMAIL_LIST_CAPTCHA_SITE=.
  ENV EMAIL_LIST_CAPTCHA_SECRET=.
  ENV EMAIL_VERIFICATION_CAPTCHA_SITE=.
  ENV EMAIL_VERIFICATION_CAPTCHA_SECRET=.
  ENV LOGIN_CAPTCHA_SITE=.
  ENV LOGIN_CAPTCHA_SECRET=.
  ENV REGISTER_CAPTCHA_SITE=.
  ENV REGISTER_CAPTCHA_SECRET=.

  # email
  ENV SMTP_SERVER=mailserver
  ENV SMTP_PORT=465
  ENV NO_REPLY_PASSWORD=

  # error reporting
  ENV ERROR_LOG_PASSWORD=
  ENV DISCORD_BUG_WEBHOOK_TOKEN=
  ENV TELEGRAM_TOKEN=
  ENV TELEGRAM_CHAT=

  EXPOSE 8080

  CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]