nginx

Author: RootShell-coder

Dockerfile

@@ -90,14 +90,6 @@ ENV LANGUAGE ru_RU.UTF-8
 ENV LC_ALL ru_RU.UTF-8
 ENV MUSL_LOCPATH /usr/share/i18n/locales/musl
 
-# Copy in built binaries
-COPY --from=builder /build/powerdns-root /
-
-# Copy configs
-COPY supervisor /etc/supervisor
-COPY powerdns /etc/powerdns
-COPY entrypoint /usr/bin
-
 RUN set -eux; \
 	true "PowerDNS and PowerAdmin requirements"; \
 	apk add --no-cache \
@@ -114,9 +106,10 @@ RUN set -eux; \
         pwgen \
 		supervisor \
 		nginx \
-		php-fpm \
+		php81 \
+		php81-fpm \
 		#php-mcrypt \
-		php-mysqlnd \
+		php81-mysqlnd \
 		php81-pdo \
 		php81-pdo_mysql \
 		php81-gettext \
@@ -134,6 +127,24 @@ RUN set -eux; \
 	true "Cleanup"; \
 	rm -f /var/cache/apk/*
 
+# Copy in built binaries
+COPY --from=builder /build/powerdns-root /
+
+# Copy configs
+COPY supervisor /etc/supervisor
+COPY powerdns /etc/powerdns
+COPY entrypoint /usr/bin
+
+#nginx
+#COPY nginx/nginx.conf /etc/nginx/nginx.conf
+#COPY nginx/vhost.conf /etc/nginx/sites-enabled/vhost.conf
+#COPY nginx/fastcgi_params /etc/nginx/fastcgi_params
+
+#php
+#COPY php/php.ini /etc/php81/php.ini
+#COPY php/php-cli.ini /etc/php/7.0/cli/php.ini
+
+
 RUN set -eux; \
  	true "Setup poweradmin"; \
 	mkdir -p /var/www/html; \

docker-compose.yml

@@ -24,7 +24,7 @@ services:
     depends_on:
       - mariadb
     ports:
-      - 8080:8080/TCP
+      - 80:80/TCP
       - 8081:8081/TCP
       - 8053:53/TCP
       - 8053:53/UDP

nginx/fastcgi_params

@@ -0,0 +1,44 @@
+fastcgi_param  QUERY_STRING       $query_string;
+fastcgi_param  REQUEST_METHOD     $request_method;
+fastcgi_param  CONTENT_TYPE       $content_type;
+fastcgi_param  CONTENT_LENGTH     $content_length;
+
+fastcgi_param  PATH_INFO          $fastcgi_script_name;
+fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
+fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
+fastcgi_param  REQUEST_URI        $request_uri;
+fastcgi_param  DOCUMENT_URI       $document_uri;
+fastcgi_param  DOCUMENT_ROOT      $document_root;
+fastcgi_param  SERVER_PROTOCOL    $server_protocol;
+fastcgi_param  HTTPS              $https if_not_empty;
+
+fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
+fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;
+
+fastcgi_param  REMOTE_ADDR        $remote_addr;
+fastcgi_param  REMOTE_PORT        $remote_port;
+fastcgi_param  SERVER_ADDR        $server_addr;
+
+# SERVER_PORT needs to be commented out and has to be determined from other fields (e.g. HTTP_HOST)
+# Otherwise it points invalid port when container port is mapped to different port on host machine,
+# which might result with invalid links generated in a PHP app.
+#fastcgi_param  SERVER_PORT       $server_port;
+
+# Using $http_host instead of $server_name - $server_name doesn't work correctly when using regexps in vhosts' server_name declaration.
+#fastcgi_param SERVER_NAME        $server_name;
+fastcgi_param  SERVER_NAME        $http_host;
+
+# PHP only, required if PHP was built with --enable-force-cgi-redirect
+fastcgi_param  REDIRECT_STATUS    200;
+
+fastcgi_index  index.php;
+fastcgi_connect_timeout 10;
+fastcgi_send_timeout 600;
+fastcgi_read_timeout 600;
+fastcgi_buffer_size 32k;
+fastcgi_buffers 32 4k;
+fastcgi_busy_buffers_size 64k;
+fastcgi_temp_file_write_size 256k;
+fastcgi_intercept_errors on;
+fastcgi_pass_header on;
+fastcgi_keep_conn on;

nginx/nginx.conf

@@ -0,0 +1,51 @@
+daemon off;
+pid /var/run/nginx.pid;
+
+user www-data;
+error_log /var/log/nginx/error.log;
+
+worker_processes auto;
+events {
+  multi_accept on;
+  use epoll;
+  worker_connections 1024;
+}
+
+http {
+  include /etc/nginx/mime.types;
+  default_type application/octet-stream;
+  access_log /var/log/nginx/access.log;
+  error_log /var/log/nginx/error.log;
+
+  gzip              on;
+  gzip_http_version 1.0;
+  gzip_comp_level   4;
+  gzip_min_length   1024;
+  gzip_proxied      any;
+  gzip_vary         off;
+  gzip_types        text/plain text/css application/x-javascript text/xml application/xml application/rss+xml application/atom+xml text/javascript application/javascript application/json text/mathml;
+
+  gzip_static       on;
+
+  client_body_buffer_size 5M;
+  client_max_body_size 256M;
+
+  proxy_buffer_size 32k;
+  proxy_buffers 16 32k;
+
+  server_tokens off;
+
+  sendfile on;
+
+  server_names_hash_bucket_size 128;
+  types_hash_max_size 2048;
+  types_hash_bucket_size 64;
+
+  tcp_nopush on;
+  tcp_nodelay on;
+
+  keepalive_timeout  15;
+
+  include /etc/nginx/conf.d/*.conf;
+  include /etc/nginx/sites-enabled/*;
+}

nginx/vhost.conf

@@ -0,0 +1,43 @@
+upstream php-upstream {
+    server unix:/var/run/php/php7.0-fpm.sock;
+}
+
+server {
+  listen      80 default_server;
+
+  root        /var/www/html;
+  index       index.html index.php;
+  
+  location ~ \.php$ {
+    include         fastcgi_params;
+    fastcgi_pass    php-upstream;
+  }
+
+  # Somehow it's not inherited by vhosts (server{} context) when using with 'stderr' value.
+  # Therefore it's re-defined here to avoid specyfing it for each vhost.
+  error_log stderr notice;
+
+  # no access to .hidden files (eg .htaccess)
+  location ~ /\. {
+    deny all;
+    log_not_found off;
+  }
+
+  # static content:
+  # - images
+  # - flash
+  # - fonts
+  # - css/js
+  location ~* \.(?:jpe?g|gif|png|ico|swf|svg|eot|ttf|otf|woff|htc|css|js)$ {
+    expires max;
+  }
+
+  location = /favicon.ico {
+    log_not_found off;
+  }
+
+  location = /robots.txt {
+    allow all;
+    log_not_found off;
+  }
+}