8.1

Author: chuoke

8.1/Dockerfile

@@ -0,0 +1,145 @@
+FROM alpine:edge
+
+LABEL Maintainer="chuoke"
+
+# mirrors.aliyun.com
+# mirrors.tuna.tsinghua.edu.cn
+ARG ALPINE_APK_REPO=mirrors.aliyun.com
+ENV ALPINE_APK_REPO=${ALPINE_APK_REPO}
+
+# swoole 在 testing 库
+RUN echo "https://dl-cdn.alpinelinux.org/alpine/edge/testing/" >> /etc/apk/repositories
+
+RUN if [ ${ALPINE_APK_REPO} ]; then \
+        sed -i "s/dl-cdn.alpinelinux.org/${ALPINE_APK_REPO}/g" /etc/apk/repositories; \
+    fi
+
+RUN apk update \
+    && apk upgrade \
+    && apk add --no-cache openssl bash curl ca-certificates shadow \
+    nodejs py3-setuptools
+
+## Install about PHP
+
+RUN apk update && \
+    apk add --no-cache \
+    php81 \
+    php81-common \
+    php81-fpm \
+    # Laravel Requirements
+    php81-bcmath \
+    php81-ctype \
+    php81-fileinfo \
+    php81-json \
+    php81-mbstring \
+    php81-openssl \
+    php81-pdo \
+    php81-tokenizer \
+    php81-xml \
+    # Base Requirements
+    php81-curl \
+    php81-dom \
+    php81-gd \
+    php81-opcache \
+    php81-xmlwriter \
+    php81-simplexml \
+    php81-posix \
+    php81-opcache \
+    # Other Requirements
+    php81-zlib \
+    php81-zip \
+    php81-sodium \
+    php81-phar \
+    php81-exif \
+    php81-iconv \
+    php81-intl \
+    php81-session \
+    php81-xmlreader \
+    php81-ftp \
+    php81-sockets \
+    php81-calendar \
+    php81-mysqli \
+    php81-pdo_mysql \
+    php81-pdo_sqlite \
+    php81-sqlite3 \
+    php81-pcntl \
+    php81-gettext \
+    php81-imap \
+    # pecl extensions
+    php81-pecl-apcu \
+    php81-pecl-redis \
+    php8-pecl-imagick \
+    # php81-pecl-xdebug \ Can't coexist with Swoole，see Swoole's doc
+    php81-pecl-swoole
+
+# Configure PHP-FPM
+COPY php-fpm.conf /etc/php81/php-fpm.d/www.conf
+COPY php.ini /etc/php81/conf.d/custom.ini
+
+RUN ln -s /usr/bin/php81 /usr/bin/php
+
+# Install composer
+ENV COMPOSER_HOME /composer
+ENV PATH ./vendor/bin:/composer/vendor/bin:$PATH
+ENV COMPOSER_ALLOW_SUPERUSER 1
+RUN php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" && \
+    php composer-setup.php --install-dir=/usr/local/bin --filename=composer && \
+    php -r "unlink('composer-setup.php');"
+
+# Config Composer packagist repo
+ARG COMPOSER_REPO_PACKAGIST=https://mirrors.aliyun.com/composer/
+ENV COMPOSER_REPO_PACKAGIST=${COMPOSER_REPO_PACKAGIST}
+RUN if [ ${COMPOSER_REPO_PACKAGIST} ]; then \
+    composer config -g repo.packagist composer ${COMPOSER_REPO_PACKAGIST} \
+;fi
+
+
+# Install about nginx
+RUN apk --no-cache add nginx && \
+    if [ -f '/etc/nginx/conf.d/default.conf' ]; then \
+        rm /etc/nginx/conf.d/default.conf \
+    ;fi
+
+# Configure nginx
+COPY nginx.conf /etc/nginx/nginx.conf
+
+# Install supervisor
+RUN apk --no-cache add supervisor
+# Configure supervisord
+COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
+
+# Clean
+RUN rm /var/cache/apk/*
+
+# ensure www-data user exists
+RUN set -x ; \
+  addgroup -g 82 -S www-data ; \
+  adduser -u 82 -D -S -G www-data www-data && exit 0 ; exit 1
+
+ARG PUID=1000
+ENV PUID ${PUID}
+ARG PGID=1000
+ENV PGID ${PGID}
+
+RUN groupmod -o -g ${PGID} www-data && \
+    usermod -o -u ${PUID} -g www-data www-data
+
+RUN groupmod -o -g ${PGID} nginx && \
+    usermod -o -u ${PUID} -g nginx nginx
+
+COPY start-container /usr/local/bin/start-container
+RUN chmod +x /usr/local/bin/start-container
+
+# Setup document root
+RUN mkdir -p /var/www/
+RUN chown -R www-data:www-data /var/www/
+
+# Add application
+WORKDIR /var/www/
+
+# Expose the port nginx is reachable on
+EXPOSE 80
+
+# CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
+
+ENTRYPOINT ["start-container"]

8.1/config/nginx-octane.conf

@@ -0,0 +1,53 @@
+# https://laravel.com/docs/8.x/octane#serving-your-application-via-nginx
+
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    ''      close;
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name domain.com;
+    server_tokens off;
+    root /var/www/site/public;
+
+    index index.php;
+
+    charset utf-8;
+
+    location /index.php {
+        try_files /not_exists @octane;
+    }
+
+    location / {
+        try_files $uri $uri/ @octane;
+    }
+
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location = /robots.txt  { access_log off; log_not_found off; }
+
+    access_log off;
+    error_log  /var/log/nginx/site.com-error.log error;
+
+    error_page 404 /index.php;
+
+    location @octane {
+        set $suffix "";
+
+        if ($uri = /index.php) {
+            set $suffix ?$query_string;
+        }
+
+        proxy_http_version 1.1;
+        proxy_set_header Host $http_host;
+        proxy_set_header Scheme $scheme;
+        proxy_set_header SERVER_PORT $server_port;
+        proxy_set_header REMOTE_ADDR $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+
+        proxy_pass http://127.0.0.1:8000$suffix;
+    }
+}

8.1/config/nginx-site.conf

@@ -0,0 +1,45 @@
+server {
+
+    listen 80;
+    # listen [::]:80;
+
+    # For https
+    # listen 443 ssl;
+    # listen [::]:443 ssl ipv6only=on;
+    # ssl_certificate /etc/nginx/ssl/default.crt;
+    # ssl_certificate_key /etc/nginx/ssl/default.key;
+
+    # server_name example.test;
+    root /var/www/public;
+    index index.php index.html index.htm;
+
+    location / {
+         try_files $uri $uri/ /index.php$is_args$args;
+    }
+
+    location ~ \.php$ {
+        try_files $uri /index.php =404;
+        # fastcgi_pass php-upstream;
+        fastcgi_pass php-fpm:9000;
+        fastcgi_index index.php;
+        fastcgi_buffers 16 16k;
+        fastcgi_buffer_size 32k;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        #fixes timeouts
+        fastcgi_read_timeout 600;
+        include fastcgi_params;
+    }
+
+    location ~ /\.ht {
+        deny all;
+    }
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/letsencrypt/;
+        log_not_found off;
+    }
+
+    error_log /var/log/nginx/error.log;
+    access_log /var/log/nginx/access.log;
+}
+

8.1/config/supervisord.conf

@@ -0,0 +1,52 @@
+[program:php-fpm]
+command=php-fpm8 -F
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+autorestart=true
+startretries=3
+
+[program:laravel-scheduler]
+process_name=%(program_name)s_%(process_num)02d
+command=/bin/sh -c "while [ true ]; do (php /var/www/site/artisan schedule:run --verbose --no-interaction &); sleep 60; done"
+autostart=true
+autorestart=true
+numprocs=1
+user=www-data
+redirect_stderr=true
+
+[program:laravel-worker]
+process_name=%(program_name)s_%(process_num)02d
+command=php /var/www/site/artisan queue:work --sleep=3 --tries=3 --max-time=3600
+autostart=true
+autorestart=true
+stopasgroup=true
+killasgroup=true
+user=www-data
+numprocs=4
+redirect_stderr=true
+stdout_logfile=/var/www/site/worker.log
+stopwaitsecs=3600
+
+[program:laravel-octane]
+# roadrunner
+# command=/usr/bin/php -d variables_order=EGPCS /var/www/site/artisan octane:start --server=roadrunner --host=0.0.0.0 --rpc-port=6001 --port=8000
+# swoole
+# command=/usr/bin/php -d variables_order=EGPCS /var/www/site/artisan octane:start --server=swoole --host=0.0.0.0 --port=8000
+#
+command=/usr/bin/php -d variables_order=EGPCS /var/www/site/artisan octane:start --host=0.0.0.0 --port=8000 --max-requests=250
+user=www-data
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+
+[program:nginx]
+command=nginx
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+autorestart=true
+startretries=3

8.1/nginx.conf

@@ -0,0 +1,88 @@
+user www-data;
+worker_processes 4;
+pid /run/nginx.pid;
+daemon off;
+
+events {
+  worker_connections 2048;
+  multi_accept on;
+  use epoll;
+}
+
+http {
+  server_tokens off;
+  sendfile on;
+
+  tcp_nopush on;
+  tcp_nodelay on;
+
+  keepalive_timeout 65;
+
+  types_hash_max_size 2048;
+  client_max_body_size 50M;
+
+  include /etc/nginx/mime.types;
+  default_type application/octet-stream;
+
+  # Define custom log format to include reponse times
+  log_format main_timed '$remote_addr - $remote_user [$time_local] "$request" '
+                        '$status $body_bytes_sent "$http_referer" '
+                        '"$http_user_agent" "$http_x_forwarded_for" '
+                        '$request_time $upstream_response_time $pipe $upstream_cache_status';
+
+  access_log /dev/stdout main_timed;
+  error_log /dev/stderr notice;
+
+  # Write temporary files to /tmp so they can be created as a non-privileged user
+  client_body_temp_path /tmp/client_temp;
+  proxy_temp_path /tmp/proxy_temp_path;
+  fastcgi_temp_path /tmp/fastcgi_temp;
+  uwsgi_temp_path /tmp/uwsgi_temp;
+  scgi_temp_path /tmp/scgi_temp;
+
+  gzip on;
+  gzip_proxied any;
+  gzip_types text/plain application/xml text/css text/js text/xml application/x-javascript text/javascript application/json application/xml+rss;
+  gzip_vary on;
+  gzip_disable "msie6";
+
+  # ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+  # ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';
+
+  open_file_cache off; # Disabled for issue 619
+  charset UTF-8;
+
+  server_tokens off;
+
+  # server {
+  #     listen 80;
+  #     listen [::]:80;
+
+  #     # For https
+  #     # listen 443 ssl;
+  #     # listen [::]:443 ssl ipv6only=on;
+  #     # ssl_certificate /etc/nginx/ssl/default.crt;
+  #     # ssl_certificate_key /etc/nginx/ssl/default.key;
+
+  #     server_name localhost;
+  #     root /var/www/;
+  #     index index.php index.html index.htm;
+
+  #     location ~ \.php$ {
+  #       try_files $uri /index.php =404;
+  #       # fastcgi_pass php-upstream;
+  #       # fastcgi_pass unix:/run/php/php-fpm7.sock;
+  #       fastcgi_pass 127.0.0.1:9000;
+  #       fastcgi_index index.php;
+  #       fastcgi_buffers 16 16k;
+  #       fastcgi_buffer_size 32k;
+  #       fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+  #       #fixes timeouts
+  #       fastcgi_read_timeout 600;
+  #       include fastcgi_params;
+  #     }
+  # }
+
+  # include /etc/nginx/conf.d/*.conf;
+  include /etc/nginx/sites-available/*.conf;
+}