aneurinandClaude Sonnet 5
f1309b4c10
Stage 2 was php:8.3-apache (Debian), which compiles PHP from source with --with-apxs2 for mod_php -- that base image alone is 719MB of our 735MB, before any app code. Replaced with alpine:3.24 + apk's own prebuilt php83/php83-apache2/apache2 packages: same architecture (one process, mod_php, .htaccess-driven rewriting), no fpm/nginx rewrite needed. - docker/apache.conf: rewritten for Alpine's apache2 (mod_rewrite ships but isn't loaded by default; a different default document root/log paths). Logs redirected to stdout/stderr so `docker logs` still shows them -- Alpine's own defaults write to a real file under ServerRoot, unlike the official Debian image's symlinked paths. - docker/entrypoint.sh: su-exec instead of su -- BusyBox's su doesn't take the same -c/user argument order as the GNU one the previous entrypoint relied on. Also moved earlier in the Dockerfile (with the other rarely-changing setup, before COPY . .) so it no longer re-runs on every build for a file that essentially never changes. - Composer's binary is still borrowed from the official composer:2 image via multi-stage COPY, not apk's own `composer` package, which turned out to pull in an entire second PHP interpreter (php85) as a dependency just to run itself. - ext-iconv needed adding explicitly (symfony/polyfill-mbstring depends on it; the official Debian image bundles it by default, apk doesn't). Verified against the real compose stack, not just that it builds: apk install; composer install; migrations on startup; PHPUnit 88/88 (runs on the host, but confirms nothing else broke); and by hand, all through the actual container -- health check, SPA fallback for unknown routes, static assets served directly, the API's 401 guard, and a full magic-link -> verify -> JWT -> authenticated project create/list round trip via the real Mailpit catcher. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
82 lines
3.1 KiB
Docker
82 lines
3.1 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# --- Stage 1: build the Vue frontend ---------------------------------------
|
|
FROM node:24-alpine AS frontend
|
|
|
|
WORKDIR /web
|
|
|
|
# Dependencies in their own layer, cached unless the manifests change. npm ci
|
|
# resolves this stage's (musl) platform binaries for rollup/esbuild.
|
|
COPY web/package.json web/package-lock.json ./
|
|
RUN npm ci
|
|
|
|
COPY web/ ./
|
|
RUN npm run build # vue-tsc type-check, then `vite build` -> /web/dist
|
|
|
|
# --- Stage 2: PHP + Apache runtime, on Alpine -------------------------------
|
|
FROM alpine:3.24
|
|
|
|
# apk's php83 packages are prebuilt (no compiling PHP from source, unlike the
|
|
# official Debian php:8.3-apache image), and split finely enough to pull in
|
|
# only what this app actually uses. php83-apache2 is Alpine's mod_php SAPI
|
|
# module -- the same role as php:8.3-apache's --with-apxs2 build. This alone
|
|
# takes the final image from ~735MB to ~90MB.
|
|
RUN apk add --no-cache \
|
|
apache2 \
|
|
curl \
|
|
php83 \
|
|
php83-apache2 \
|
|
php83-ctype \
|
|
php83-curl \
|
|
php83-fileinfo \
|
|
php83-iconv \
|
|
php83-mbstring \
|
|
php83-opcache \
|
|
php83-openssl \
|
|
php83-pdo \
|
|
php83-pdo_sqlite \
|
|
php83-phar \
|
|
php83-session \
|
|
php83-tokenizer \
|
|
su-exec \
|
|
# apk doesn't symlink an unversioned `php` -- composer's own wrapper
|
|
# script (copied in below) and bin/migrate.php's shebang both expect one.
|
|
&& ln -s /usr/bin/php83 /usr/local/bin/php
|
|
|
|
# --- Composer ----------------------------------------------------------------
|
|
# Borrowed from the official composer image rather than apk's own `composer`
|
|
# package, which drags in an entire second PHP interpreter (php85) as a
|
|
# dependency just to run the phar -- multi-stage COPY takes only the binary.
|
|
COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
|
|
|
|
# --- Apache: document root -> public/, allow .htaccess rewrites -------------
|
|
COPY docker/apache.conf /etc/apache2/conf.d/zz-app.conf
|
|
|
|
# --- Entrypoint: migrate, then hand off to Apache ---------------------------
|
|
# Copied early, alongside the other rarely-changing setup above -- after
|
|
# COPY . . (below) every later layer re-runs on nearly every build, so this
|
|
# would otherwise redo work for a file that essentially never changes.
|
|
COPY docker/entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
RUN chmod +x /usr/local/bin/entrypoint.sh
|
|
|
|
WORKDIR /var/www/html
|
|
|
|
# --- PHP dependencies (own layer, cached unless composer.* changes) --------
|
|
COPY composer.json composer.lock ./
|
|
RUN composer install --no-dev --no-interaction --no-progress --prefer-dist --no-autoloader
|
|
|
|
# --- Application source ----------------------------------------------------
|
|
COPY . .
|
|
RUN composer dump-autoload --optimize --no-dev \
|
|
&& mkdir -p storage \
|
|
&& chown -R apache:apache storage
|
|
|
|
# --- Built frontend: served from the web root next to the API front controller
|
|
COPY --from=frontend /web/dist/ ./public/
|
|
|
|
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|
|
CMD ["httpd", "-D", "FOREGROUND"]
|
|
|
|
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s \
|
|
CMD curl -fsS http://localhost/api/health || exit 1
|