88 lines
3.7 KiB
Docker
88 lines
3.7 KiB
Docker
# syntax=docker/dockerfile:1
|
|
# Clusev — multi-stage image.
|
|
# dev : php-fpm + nginx + supervisor + composer + node (source bind-mounted)
|
|
# prod : baked source + vendor + built assets, no node
|
|
# See CLAUDE.md §7/§8. Host has only Docker — everything runs in here.
|
|
|
|
ARG PHP_VERSION=8.3
|
|
|
|
# ============================================================================
|
|
# base — php-fpm + nginx + supervisor + PHP extensions
|
|
# ============================================================================
|
|
FROM php:${PHP_VERSION}-fpm-bookworm AS base
|
|
|
|
ARG APP_UID=1002
|
|
ARG APP_GID=1002
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
nginx supervisor git unzip \
|
|
libzip-dev libpng-dev libjpeg62-turbo-dev libfreetype6-dev \
|
|
libicu-dev libonig-dev \
|
|
default-mysql-client \
|
|
&& docker-php-ext-configure gd --with-freetype --with-jpeg \
|
|
&& docker-php-ext-install -j"$(nproc)" \
|
|
pdo_mysql mbstring zip gd intl bcmath pcntl opcache exif \
|
|
&& pecl install redis \
|
|
&& docker-php-ext-enable redis \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Composer (from the official image)
|
|
COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
|
|
|
|
# Non-root user matching the host UID/GID → clean bind-mount writes in dev
|
|
RUN groupadd -g ${APP_GID} app \
|
|
&& useradd -u ${APP_UID} -g app -m -s /bin/sh app
|
|
|
|
# Runtime configs
|
|
COPY docker/php/php.ini /usr/local/etc/php/conf.d/zz-clusev.ini
|
|
COPY docker/php/www.conf /usr/local/etc/php-fpm.d/www.conf
|
|
COPY docker/nginx/nginx.conf /etc/nginx/nginx.conf
|
|
COPY docker/supervisor/supervisord.conf /etc/supervisor/conf.d/clusev.conf
|
|
COPY docker/entrypoint.sh /usr/local/bin/entrypoint
|
|
RUN chmod +x /usr/local/bin/entrypoint
|
|
|
|
WORKDIR /var/www/html
|
|
EXPOSE 80
|
|
ENTRYPOINT ["entrypoint"]
|
|
CMD ["supervisord", "-c", "/etc/supervisor/conf.d/clusev.conf"]
|
|
|
|
# ============================================================================
|
|
# dev — add Node 20 for Vite; source is bind-mounted at runtime (no COPY)
|
|
# ============================================================================
|
|
FROM base AS dev
|
|
COPY --from=node:20-bookworm-slim /usr/local/bin/node /usr/local/bin/node
|
|
COPY --from=node:20-bookworm-slim /usr/local/lib/node_modules /usr/local/lib/node_modules
|
|
RUN ln -sf /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm \
|
|
&& ln -sf /usr/local/lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx
|
|
|
|
# Dev runs Vite (HMR) too — php-fpm + nginx + vite via supervisor in this one container.
|
|
COPY docker/supervisor/supervisord.dev.conf /etc/supervisor/conf.d/clusev.conf
|
|
|
|
# ============================================================================
|
|
# vendor — prod composer dependencies (no dev deps)
|
|
# ============================================================================
|
|
FROM base AS vendor
|
|
COPY composer.json composer.lock ./
|
|
RUN composer install --no-dev --no-scripts --no-autoloader --prefer-dist
|
|
COPY . .
|
|
RUN composer dump-autoload --optimize --no-dev
|
|
|
|
# ============================================================================
|
|
# assets — prod Vite build
|
|
# ============================================================================
|
|
FROM node:20-bookworm-slim AS assets
|
|
WORKDIR /app
|
|
COPY package.json package-lock.json* ./
|
|
RUN npm ci || npm install
|
|
COPY . .
|
|
RUN npm run build
|
|
|
|
# ============================================================================
|
|
# prod — baked source + vendor + assets
|
|
# ============================================================================
|
|
FROM base AS prod
|
|
COPY . .
|
|
COPY --from=vendor /var/www/html/vendor ./vendor
|
|
COPY --from=assets /app/public/build ./public/build
|
|
RUN rm -f .env && chown -R app:app storage bootstrap/cache
|