mirror of
https://github.com/pelican-dev/panel.git
synced 2025-10-31 21:06:52 +01:00
111 lines
3.6 KiB
Docker
111 lines
3.6 KiB
Docker
# syntax=docker.io/docker/dockerfile:1.13-labs
|
|
# Pelican Production Dockerfile
|
|
|
|
##
|
|
# If you want to build this locally you want to run `docker build -f Dockerfile.dev`
|
|
##
|
|
|
|
# ================================
|
|
# Stage 1-1: Composer Install
|
|
# ================================
|
|
FROM --platform=$TARGETOS/$TARGETARCH localhost:5000/base-php:$TARGETARCH AS composer
|
|
|
|
WORKDIR /build
|
|
|
|
COPY --from=composer:latest /usr/bin/composer /usr/local/bin/composer
|
|
|
|
# Copy bare minimum to install Composer dependencies
|
|
COPY composer.json composer.lock ./
|
|
|
|
RUN composer install --no-dev --no-interaction --no-autoloader --no-scripts
|
|
|
|
# ================================
|
|
# Stage 1-2: Yarn Install
|
|
# ================================
|
|
FROM --platform=$TARGETOS/$TARGETARCH node:20-alpine AS yarn
|
|
|
|
WORKDIR /build
|
|
|
|
# Copy bare minimum to install Yarn dependencies
|
|
COPY package.json yarn.lock ./
|
|
|
|
RUN yarn config set network-timeout 300000 \
|
|
&& yarn install --frozen-lockfile
|
|
|
|
# ================================
|
|
# Stage 2-1: Composer Optimize
|
|
# ================================
|
|
FROM --platform=$TARGETOS/$TARGETARCH composer AS composerbuild
|
|
|
|
# Copy full code to optimize autoload
|
|
COPY --exclude=Caddyfile --exclude=docker/ . ./
|
|
|
|
RUN composer dump-autoload --optimize
|
|
|
|
# ================================
|
|
# Stage 2-2: Build Frontend Assets
|
|
# ================================
|
|
FROM --platform=$TARGETOS/$TARGETARCH yarn AS yarnbuild
|
|
|
|
WORKDIR /build
|
|
|
|
# Copy full code
|
|
COPY --exclude=Caddyfile --exclude=docker/ . ./
|
|
COPY --from=composer /build .
|
|
|
|
RUN yarn run build
|
|
|
|
# ================================
|
|
# Stage 5: Build Final Application Image
|
|
# ================================
|
|
FROM --platform=$TARGETOS/$TARGETARCH localhost:5000/base-php:$TARGETARCH AS final
|
|
|
|
WORKDIR /var/www/html
|
|
|
|
# Install additional required libraries
|
|
RUN apk add --no-cache \
|
|
caddy ca-certificates supervisor supercronic fcgi
|
|
|
|
COPY --chown=root:www-data --chmod=640 --from=composerbuild /build .
|
|
COPY --chown=root:www-data --chmod=640 --from=yarnbuild /build/public ./public
|
|
|
|
# Set permissions
|
|
# First ensure all files are owned by root and restrict www-data to read access
|
|
RUN chown root:www-data ./ \
|
|
&& chmod 750 ./ \
|
|
# Files should not have execute set, but directories need it
|
|
&& find ./ -type d -exec chmod 750 {} \; \
|
|
# Create necessary directories
|
|
&& mkdir -p /pelican-data/storage /var/www/html/storage/app/public /var/run/supervisord /etc/supercronic \
|
|
# Symlinks for env, database, and avatars
|
|
&& ln -s /pelican-data/.env ./.env \
|
|
&& ln -s /pelican-data/database/database.sqlite ./database/database.sqlite \
|
|
&& ln -sf /var/www/html/storage/app/public /var/www/html/public/storage \
|
|
&& ln -s /pelican-data/storage/avatars /var/www/html/storage/app/public/avatars \
|
|
&& ln -s /pelican-data/storage/fonts /var/www/html/storage/app/public/fonts \
|
|
# Allow www-data write permissions where necessary
|
|
&& chown -R www-data:www-data /pelican-data ./storage ./bootstrap/cache /var/run/supervisord /var/www/html/public/storage \
|
|
&& chmod -R u+rwX,g+rwX,o-rwx /pelican-data ./storage ./bootstrap/cache /var/run/supervisord \
|
|
&& chown -R www-data: /usr/local/etc/php/
|
|
|
|
# Configure Supervisor
|
|
COPY docker/supervisord.conf /etc/supervisord.conf
|
|
COPY docker/Caddyfile /etc/caddy/Caddyfile
|
|
# Add Laravel scheduler to crontab
|
|
COPY docker/crontab /etc/supercronic/crontab
|
|
|
|
COPY docker/entrypoint.sh /entrypoint.sh
|
|
COPY docker/healthcheck.sh /healthcheck.sh
|
|
|
|
HEALTHCHECK --interval=5m --timeout=10s --start-period=5s --retries=3 \
|
|
CMD /bin/ash /healthcheck.sh
|
|
|
|
EXPOSE 80 443
|
|
|
|
VOLUME /pelican-data
|
|
|
|
USER www-data
|
|
|
|
ENTRYPOINT [ "/bin/ash", "/entrypoint.sh" ]
|
|
CMD [ "supervisord", "-n", "-c", "/etc/supervisord.conf" ]
|