web/Dockerfile

124 lines
3 KiB
Text
Raw Normal View History

# ---- vendor ----------------------------------------------------------------
FROM composer:2 AS vendor
WORKDIR /app
# anagram-finder/core is a VCS repository, so composer needs git.
RUN apk add --no-cache git
COPY composer.json composer.lock ./
RUN composer install \
--no-dev \
--no-scripts \
--no-autoloader \
--prefer-dist \
--no-interaction
COPY . .
# --no-scripts: Laravel's post-autoload-dump hook runs artisan, which wants an
# environment that does not exist at build time. Package discovery happens on boot.
RUN composer dump-autoload --no-dev --optimize --classmap-authoritative --no-scripts
# ---- assets ----------------------------------------------------------------
FROM node:22-alpine AS assets
WORKDIR /app
# @lvl0/ui is a git dependency, so npm needs git available.
RUN apk add --no-cache git
COPY package.json package-lock.json ./
RUN npm ci
COPY vite.config.js ./
COPY resources ./resources
# app.css imports Flux's stylesheet from vendor/ and scans three vendor globs
# for class names, so the asset build needs composer's output present.
COPY --from=vendor /app/vendor ./vendor
RUN npm run build
# ---- runtime ---------------------------------------------------------------
FROM dunglas/frankenphp:1-php8.4-alpine
RUN apk add --no-cache mariadb-client curl
RUN install-php-extensions \
pdo_mysql \
opcache \
zip \
gd \
intl \
bcmath \
pcntl
RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
WORKDIR /app
COPY --from=vendor /app /app
COPY --from=assets /app/public/build /app/public/build
# The dev server writes public/hot and only removes it on a clean shutdown; a
# stray copy makes @vite() point at a dev server that does not exist here.
RUN rm -f /app/public/hot
RUN cat > /etc/caddy/Caddyfile <<'EOF'
{
frankenphp
order php_server before file_server
}
:8000 {
root * /app/public
php_server {
index index.php
}
encode gzip
file_server
header {
X-Frame-Options "SAMEORIGIN"
X-Content-Type-Options "nosniff"
Referrer-Policy "strict-origin-when-cross-origin"
}
}
EOF
RUN cat > /start.sh <<'EOF'
#!/bin/sh
set -e
if [ -n "$DB_HOST" ]; then
echo "Waiting for database..."
until mariadb -h "$DB_HOST" -u "$DB_USERNAME" -p"$DB_PASSWORD" -e "SELECT 1" >/dev/null 2>&1; do
sleep 2
done
fi
# Rebuild the package manifest from what is actually installed. Any manifest
# baked in at build time could name a dev provider that --no-dev omitted.
rm -f bootstrap/cache/packages.php bootstrap/cache/services.php
php artisan package:discover --ansi
php artisan migrate --force
# Cached at boot rather than at build: config:cache bakes in environment values,
# which are not known until the container runs.
php artisan config:cache
php artisan route:cache
php artisan view:cache
exec frankenphp run --config /etc/caddy/Caddyfile
EOF
RUN chmod +x /start.sh
RUN chown -R www-data:www-data /app/storage /app/bootstrap/cache
EXPOSE 8000
CMD ["/start.sh"]