Merge branch 'php-8.5' into 'master'
Php 8.5 See merge request ldc-web/projets/ldc-web-images-docker!1
This commit is contained in:
Vincent BRIDIER
commit
e87cc6343a
15 changed files with 6568 additions and 0 deletions
114
PHP8.5/DEV/Dockerfile
Normal file
114
PHP8.5/DEV/Dockerfile
Normal file
|
|
@ -0,0 +1,114 @@
|
|||
FROM php:8.5.4-apache-trixie
|
||||
|
||||
ENV DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
ARG http_proxy
|
||||
|
||||
ENV http_proxy=${http_proxy}
|
||||
ENV https_proxy=${http_proxy}
|
||||
ENV HTTP_PROXY=${http_proxy}
|
||||
ENV HTTPS_PROXY=${http_proxy}
|
||||
|
||||
# Install system dependencies and PHP extensions
|
||||
RUN apt-get update -qq && \
|
||||
apt-get install -qy --no-install-recommends \
|
||||
nano vim \
|
||||
libfreetype6-dev libjpeg62-turbo-dev libpng-dev libwebp-dev libxpm-dev \
|
||||
zlib1g-dev libicu-dev g++ \
|
||||
libxslt-dev \
|
||||
libzip-dev unzip zip \
|
||||
libmagick++-dev libmagickwand-dev imagemagick \
|
||||
libcurl4-openssl-dev \
|
||||
libmemcached-dev \
|
||||
ldap-utils libldap2-dev \
|
||||
locales \
|
||||
git zsh htop \
|
||||
ca-certificates curl gnupg \
|
||||
mariadb-client \
|
||||
libonig-dev \
|
||||
build-essential pkg-config autoconf libtool \
|
||||
&& echo "fr_FR.UTF-8 UTF-8" > /etc/locale.gen \
|
||||
&& locale-gen fr_FR.UTF-8 \
|
||||
&& dpkg-reconfigure locales \
|
||||
&& /usr/sbin/update-locale LANG=fr_FR.UTF-8
|
||||
|
||||
RUN docker-php-ext-configure gd --enable-gd --with-webp --with-jpeg --with-xpm --with-freetype \
|
||||
&& docker-php-ext-configure zip --with-zip \
|
||||
&& docker-php-ext-install -j$(nproc) exif gd gettext intl mysqli pdo_mysql xsl zip bcmath ldap gmp
|
||||
|
||||
# PECL PROXY HACK
|
||||
RUN if [ -n "${http_proxy}" ]; then \
|
||||
pear config-set http_proxy "${http_proxy}"; \
|
||||
fi
|
||||
|
||||
# PECL EXTENSIONS
|
||||
RUN pecl channel-update pecl.php.net \
|
||||
&& pecl install imagick-3.8.1 redis-6.3.0 \
|
||||
&& docker-php-ext-enable imagick redis
|
||||
|
||||
RUN pecl install xdebug pcov \
|
||||
&& docker-php-ext-enable xdebug pcov
|
||||
|
||||
# CLEAN UP XDEBUG ENABLE
|
||||
RUN rm -f /usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini
|
||||
|
||||
# CLEANUP
|
||||
RUN apt-get clean \
|
||||
&& apt-get purge -y --auto-remove build-essential pkg-config autoconf \
|
||||
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
||||
|
||||
# Set locale environment variables
|
||||
ENV LC_ALL=fr_FR.UTF-8
|
||||
ENV LANG=fr_FR.UTF-8
|
||||
ENV LANGUAGE=fr_FR.UTF-8:fr
|
||||
|
||||
# Install Node.js 24.x
|
||||
RUN mkdir -p /etc/apt/keyrings \
|
||||
&& curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
|
||||
&& echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_24.x nodistro main" > /etc/apt/sources.list.d/nodesource.list \
|
||||
&& apt-get update -qq \
|
||||
&& apt-get install -y --no-install-recommends nodejs \
|
||||
&& apt-get clean \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
|
||||
# Install Bun
|
||||
RUN set -eux; \
|
||||
dir="${BUN_INSTALL:-$HOME/.bun}/bin"; mkdir -p "$dir"; \
|
||||
url="https://github.com/oven-sh/bun/releases/latest/download/bun-linux-x64.zip"; \
|
||||
curl -fsSL -o /tmp/bun.zip "$url"; \
|
||||
unzip -oqd "$dir" /tmp/bun.zip; \
|
||||
bunbin=$(find "$dir" -type f -name 'bun*' -perm /a+x | head -n1); \
|
||||
[ -n "$bunbin" ] && mv -f "$bunbin" "$dir/bun"; \
|
||||
chmod +x "$dir/bun" || true; \
|
||||
rm -f /tmp/bun.zip; \
|
||||
ln -sf "$dir/bun" /usr/local/bin/bun
|
||||
|
||||
# Install Composers
|
||||
RUN curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer --version=2.9.5
|
||||
|
||||
# Setup Oh-My-Zsh and plugins (dev only)
|
||||
RUN sh -c "$(curl -fsSL https://raw.github.com/robbyrussell/oh-my-zsh/master/tools/install.sh)" \
|
||||
&& git clone https://github.com/zsh-users/zsh-autosuggestions ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-autosuggestions \
|
||||
&& sed -i 's/plugins=(git)/plugins=(git laravel zsh-autosuggestions)/g' ~/.zshrc \
|
||||
&& sed -i 's/ZSH_THEME="robbyrussell"/ZSH_THEME="agnoster"/g' ~/.zshrc
|
||||
|
||||
ENV SHELL=/bin/zsh
|
||||
|
||||
# Set default shell to zsh
|
||||
RUN chsh -s /bin/zsh
|
||||
|
||||
# Copy configuration files
|
||||
COPY conf/common-apache.conf /etc/apache2/conf-available/z-app.conf
|
||||
COPY conf/common-ports.conf /etc/apache2/ports.conf
|
||||
COPY conf/common-security.conf /etc/apache2/conf-enabled/security.conf
|
||||
COPY conf/php.ini /usr/local/etc/php/conf.d/app.ini
|
||||
COPY conf/xdebug.ini /usr/local/etc/php/conf.d/xdebug.ini
|
||||
COPY conf/vhost.conf /etc/apache2/sites-available/000-default.conf
|
||||
|
||||
# Enable Apache modules and configuration
|
||||
RUN a2enmod rewrite remoteip headers http2 && \
|
||||
a2enconf z-app
|
||||
|
||||
# XDEBUG LOGS
|
||||
RUN mkdir -p /app/logs/
|
||||
WORKDIR /app/srcs
|
||||
114
PHP8.5/DEV/conf/common-apache.conf
Normal file
114
PHP8.5/DEV/conf/common-apache.conf
Normal file
|
|
@ -0,0 +1,114 @@
|
|||
#User noroot
|
||||
#Group noroot
|
||||
#
|
||||
# Timeout: The number of seconds before receives and sends time out.
|
||||
#
|
||||
Timeout 300
|
||||
|
||||
#
|
||||
# KeepAlive: Whether or not to allow persistent connections (more than
|
||||
# one request per connection). Set to "Off" to deactivate.
|
||||
#
|
||||
KeepAlive On
|
||||
|
||||
#
|
||||
# MaxKeepAliveRequests: The maximum number of requests to allow
|
||||
# during a persistent connection. Set to 0 to allow an unlimited amount.
|
||||
# We recommend you leave this number high, for maximum performance.
|
||||
#
|
||||
MaxKeepAliveRequests 100
|
||||
|
||||
#
|
||||
# KeepAliveTimeout: Number of seconds to wait for the next request from the
|
||||
# same client on the same connection.
|
||||
#
|
||||
KeepAliveTimeout 5
|
||||
|
||||
#
|
||||
# AccessFileName: The name of the file to look for in each directory
|
||||
# for additional configuration directives. See also the AllowOverride
|
||||
# directive.
|
||||
#
|
||||
|
||||
AccessFileName .htaccess
|
||||
|
||||
#
|
||||
# The following lines prevent .htaccess and .htpasswd files from being
|
||||
# viewed by Web clients.
|
||||
#
|
||||
<FilesMatch "^\.ht">
|
||||
Require all denied
|
||||
</FilesMatch>
|
||||
|
||||
# Block .git composer and npm files
|
||||
|
||||
<FilesMatch "^composer\.(json|lock)">
|
||||
Require all denied
|
||||
</FilesMatch>
|
||||
<FilesMatch "^package(-lock)?\.json">
|
||||
Require all denied
|
||||
</FilesMatch>
|
||||
<FilesMatch "^\.">
|
||||
Require all denied
|
||||
</FilesMatch>
|
||||
<DirectoryMatch "^\.|\/\.">
|
||||
Require all denied
|
||||
</Directorymatch>
|
||||
|
||||
#
|
||||
# DefaultType is the default MIME type the server will use for a document
|
||||
# if it cannot otherwise determine one, such as from filename extensions.
|
||||
# If your server contains mostly text or HTML documents, "text/plain" is
|
||||
# a good value. If most of your content is binary, such as applications
|
||||
# or images, you may want to use "application/octet-stream" instead to
|
||||
# keep browsers from trying to display binary files as though they are
|
||||
# text.
|
||||
#
|
||||
# It is also possible to omit any default MIME type and let the
|
||||
# client's browser guess an appropriate action instead. Typically the
|
||||
# browser will decide based on the file's extension then. In cases
|
||||
# where no good assumption can be made, letting the default MIME type
|
||||
# unset is suggested instead of forcing the browser to accept
|
||||
# incorrect metadata.
|
||||
#
|
||||
DefaultType None
|
||||
|
||||
|
||||
#
|
||||
# HostnameLookups: Log the names of clients or just their IP addresses
|
||||
# e.g., www.apache.org (on) or 204.62.129.132 (off).
|
||||
# The default is off because it'd be overall better for the net if people
|
||||
# had to knowingly turn this feature on, since enabling it means that
|
||||
# each client request will result in AT LEAST one lookup request to the
|
||||
# nameserver.
|
||||
#
|
||||
HostnameLookups Off
|
||||
|
||||
# ErrorLog: The location of the error log file.
|
||||
# If you do not specify an ErrorLog directive within a <VirtualHost>
|
||||
# container, error messages relating to that virtual host will be
|
||||
# logged here. If you *do* define an error logfile for a <VirtualHost>
|
||||
# container, that host's errors will be logged there and not here.
|
||||
#
|
||||
ErrorLog ${APACHE_LOG_DIR}/error.log
|
||||
|
||||
#
|
||||
# LogLevel: Control the number of messages logged to the error_log.
|
||||
# Possible values include: debug, info, notice, warn, error, crit,
|
||||
# alert, emerg.
|
||||
#
|
||||
LogLevel warn
|
||||
|
||||
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
|
||||
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b" common
|
||||
LogFormat "%{Referer}i -> %U" referer
|
||||
LogFormat "%{User-agent}i" agent
|
||||
SetEnvIf Remote_Addr "127\.0\.0\.1" loopback
|
||||
SetEnvIf Request_URI "^/haproxytest\.txt$" dontlog
|
||||
SetEnvIf Request_URI "^check_http" dontlog
|
||||
SetEnvIf Remote_Addr "127.0.0.1" dontlog
|
||||
SetEnvIf Remote_Addr "::1" dontlog
|
||||
|
||||
# Include generic snippets of statements
|
||||
SetEnvIf Remote_Addr "127\.0\.0\.1" loopback
|
||||
SetEnvIf Request_URI "^/haproxytest\.txt$" dontlog
|
||||
8
PHP8.5/DEV/conf/common-ports.conf
Normal file
8
PHP8.5/DEV/conf/common-ports.conf
Normal file
|
|
@ -0,0 +1,8 @@
|
|||
# If you just change the port or add more ports here, you will likely also
|
||||
# have to change the VirtualHost statement in
|
||||
# /etc/apache2/sites-enabled/000-default.conf
|
||||
|
||||
#Listen 80
|
||||
Listen 443
|
||||
|
||||
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
|
||||
74
PHP8.5/DEV/conf/common-security.conf
Normal file
74
PHP8.5/DEV/conf/common-security.conf
Normal file
|
|
@ -0,0 +1,74 @@
|
|||
#
|
||||
# Disable access to the entire file system except for the directories that
|
||||
# are explicitly allowed later.
|
||||
#
|
||||
# This currently breaks the configurations that come with some web application
|
||||
# Debian packages.
|
||||
#
|
||||
#<Directory />
|
||||
# AllowOverride None
|
||||
# Order Deny,Allow
|
||||
# Deny from all
|
||||
#</Directory>
|
||||
|
||||
|
||||
# Changing the following options will not really affect the security of the
|
||||
# server, but might make attacks slightly more difficult in some cases.
|
||||
|
||||
#
|
||||
# ServerTokens
|
||||
# This directive configures what you return as the Server HTTP response
|
||||
# Header. The default is 'Full' which sends information about the OS-Type
|
||||
# and compiled in modules.
|
||||
# Set to one of: Full | OS | Minimal | Minor | Major | Prod
|
||||
# where Full conveys the most information, and Prod the least.
|
||||
#ServerTokens Minimal
|
||||
ServerTokens Prod
|
||||
#ServerTokens Full
|
||||
|
||||
#
|
||||
# Optionally add a line containing the server version and virtual host
|
||||
# name to server-generated pages (internal error documents, FTP directory
|
||||
# listings, mod_status and mod_info output etc., but not CGI generated
|
||||
# documents or custom error documents).
|
||||
# Set to "EMail" to also include a mailto: link to the ServerAdmin.
|
||||
# Set to one of: On | Off | EMail
|
||||
#ServerSignature Off
|
||||
ServerSignature Off
|
||||
|
||||
#
|
||||
# Allow TRACE method
|
||||
#
|
||||
# Set to "extended" to also reflect the request body (only for testing and
|
||||
# diagnostic purposes).
|
||||
#
|
||||
# Set to one of: On | Off | extended
|
||||
TraceEnable Off
|
||||
#TraceEnable On
|
||||
|
||||
#
|
||||
# Forbid access to version control directories
|
||||
#
|
||||
# If you use version control systems in your document root, you should
|
||||
# probably deny access to their directories. For example, for subversion:
|
||||
#
|
||||
#<DirectoryMatch "/\.svn">
|
||||
# Require all denied
|
||||
#</DirectoryMatch>
|
||||
|
||||
#
|
||||
# Setting this header will prevent MSIE from interpreting files as something
|
||||
# else than declared by the content type in the HTTP headers.
|
||||
# Requires mod_headers to be enabled.
|
||||
#
|
||||
#Header set X-Content-Type-Options: "nosniff"
|
||||
|
||||
#
|
||||
# Setting this header will prevent other sites from embedding pages from this
|
||||
# site as frames. This defends against clickjacking attacks.
|
||||
# Requires mod_headers to be enabled.
|
||||
#
|
||||
#Header set X-Frame-Options: "sameorigin"
|
||||
|
||||
|
||||
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
|
||||
1941
PHP8.5/DEV/conf/php.ini
Normal file
1941
PHP8.5/DEV/conf/php.ini
Normal file
File diff suppressed because it is too large
Load diff
18
PHP8.5/DEV/conf/vhost.conf
Normal file
18
PHP8.5/DEV/conf/vhost.conf
Normal file
|
|
@ -0,0 +1,18 @@
|
|||
<VirtualHost *:443>
|
||||
Protocols h2 h2c http/1.1
|
||||
ServerAdmin contact@ldc.fr
|
||||
DocumentRoot /app/${DOCUMENTROOT}
|
||||
|
||||
<Directory /app/${DOCUMENTROOT}>
|
||||
Options +MultiViews -Indexes +FollowSymLinks
|
||||
AllowOverride All
|
||||
Require all granted
|
||||
|
||||
php_admin_value open_basedir "/usr/local/bin/php:/app/srcs/:/app/tmp/"
|
||||
php_admin_value upload_tmp_dir /app/tmp
|
||||
php_admin_value error_log /app/logs/app_error_${PROJECT}.log
|
||||
</Directory>
|
||||
|
||||
ErrorLog /app/logs/error_${PROJECT}.log
|
||||
CustomLog /app/logs/access_${PROJECT}.log combined
|
||||
</VirtualHost>
|
||||
9
PHP8.5/DEV/conf/xdebug.ini
Normal file
9
PHP8.5/DEV/conf/xdebug.ini
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
zend_extension=xdebug
|
||||
|
||||
[xdebug]
|
||||
xdebug.mode=debug
|
||||
xdebug.client_host=host.docker.internal
|
||||
xdebug.start_with_request=yes
|
||||
xdebug.cli_color=1
|
||||
xdebug.log=/app/logs/xdebug_${PROJECT}.log
|
||||
xdebug.log_level=3
|
||||
98
PHP8.5/PROD/Dockerfile
Normal file
98
PHP8.5/PROD/Dockerfile
Normal file
|
|
@ -0,0 +1,98 @@
|
|||
FROM php:8.5.4-apache-trixie
|
||||
|
||||
ARG http_proxy
|
||||
|
||||
ENV http_proxy=${http_proxy}
|
||||
ENV https_proxy=${http_proxy}
|
||||
ENV HTTP_PROXY=${http_proxy}
|
||||
ENV HTTPS_PROXY=${http_proxy}
|
||||
|
||||
RUN apt-get update -qq && \
|
||||
apt-get install -qy \
|
||||
# Common
|
||||
nano \
|
||||
vim \
|
||||
# GD
|
||||
libfreetype6-dev \
|
||||
libjpeg62-turbo-dev \
|
||||
libpng-dev \
|
||||
libwebp-dev \
|
||||
libxpm-dev \
|
||||
# INTL
|
||||
zlib1g-dev libicu-dev g++ \
|
||||
# XSL
|
||||
libxslt-dev \
|
||||
# ZIP
|
||||
libzip-dev \
|
||||
unzip \
|
||||
zip \
|
||||
# Imagick
|
||||
libmagick++-dev \
|
||||
libmagickwand-dev \
|
||||
#GMP
|
||||
libgmp-dev \
|
||||
# Memcached
|
||||
libmemcached-dev \
|
||||
# ldap
|
||||
ldap-utils libldap2-dev \
|
||||
# locales
|
||||
locales \
|
||||
# libcap
|
||||
libcap2-bin && \
|
||||
rm -rf /var/cache/apt
|
||||
|
||||
# LOCALES
|
||||
ENV DEBIAN_FRONTEND=noninteractive
|
||||
RUN echo "fr_FR.UTF-8 UTF-8" > /etc/locale.gen && \
|
||||
locale-gen fr_FR.UTF-8 && \
|
||||
dpkg-reconfigure locales && \
|
||||
/usr/sbin/update-locale LANG fr_FR.UTF-8
|
||||
ENV LC_ALL=fr_FR.UTF-8
|
||||
ENV LANG=fr_FR.UTF-8
|
||||
ENV LANGUAGE=fr_FR.UTF-8:fr
|
||||
# END LOCALES
|
||||
|
||||
RUN docker-php-ext-configure gd \
|
||||
--enable-gd \
|
||||
--with-webp \
|
||||
--with-jpeg \
|
||||
--with-xpm \
|
||||
--with-freetype
|
||||
|
||||
RUN docker-php-ext-configure intl
|
||||
RUN docker-php-ext-configure zip --with-zip
|
||||
RUN docker-php-ext-configure ldap
|
||||
RUN docker-php-ext-install exif gd gettext intl mysqli pdo_mysql xsl zip bcmath ldap gmp
|
||||
|
||||
# PECL PROXY HACK
|
||||
RUN if [ -n "${http_proxy}" ]; then \
|
||||
pear config-set http_proxy "${http_proxy}"; \
|
||||
fi
|
||||
|
||||
RUN pecl channel-update pecl.php.net
|
||||
RUN pecl install imagick-3.8.1 && docker-php-ext-enable imagick
|
||||
RUN pecl install memcached-3.4.0 && docker-php-ext-enable memcached
|
||||
RUN pecl install redis-6.3.0 && docker-php-ext-enable redis
|
||||
|
||||
RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
||||
|
||||
COPY conf/common-apache.conf /etc/apache2/conf-available/z-app.conf
|
||||
COPY conf/common-ports.conf /etc/apache2/ports.conf
|
||||
COPY conf/common-security.conf /etc/apache2/conf-enabled/security.conf
|
||||
|
||||
COPY conf/php.ini /usr/local/etc/php/php.ini
|
||||
|
||||
COPY conf/vhost.conf /etc/apache2/sites-available/000-default.conf
|
||||
|
||||
RUN a2enmod rewrite remoteip headers http2 && \
|
||||
a2enconf z-app
|
||||
|
||||
RUN mkdir -p /app/tmp && chmod -R 770 /app/tmp && chown -R www-data:www-data /app
|
||||
|
||||
#Change access righs to conf, logs, bin from root to www-data
|
||||
RUN chown -hR www-data:www-data /var/log/apache2
|
||||
#setcap to bind to privileged ports as non-root
|
||||
RUN setcap 'cap_net_bind_service=+ep' /usr/sbin/apache2
|
||||
|
||||
USER www-data
|
||||
WORKDIR /app/srcs
|
||||
114
PHP8.5/PROD/conf/common-apache.conf
Normal file
114
PHP8.5/PROD/conf/common-apache.conf
Normal file
|
|
@ -0,0 +1,114 @@
|
|||
#User noroot
|
||||
#Group noroot
|
||||
#
|
||||
# Timeout: The number of seconds before receives and sends time out.
|
||||
#
|
||||
Timeout 300
|
||||
|
||||
#
|
||||
# KeepAlive: Whether or not to allow persistent connections (more than
|
||||
# one request per connection). Set to "Off" to deactivate.
|
||||
#
|
||||
KeepAlive On
|
||||
|
||||
#
|
||||
# MaxKeepAliveRequests: The maximum number of requests to allow
|
||||
# during a persistent connection. Set to 0 to allow an unlimited amount.
|
||||
# We recommend you leave this number high, for maximum performance.
|
||||
#
|
||||
MaxKeepAliveRequests 100
|
||||
|
||||
#
|
||||
# KeepAliveTimeout: Number of seconds to wait for the next request from the
|
||||
# same client on the same connection.
|
||||
#
|
||||
KeepAliveTimeout 5
|
||||
|
||||
#
|
||||
# AccessFileName: The name of the file to look for in each directory
|
||||
# for additional configuration directives. See also the AllowOverride
|
||||
# directive.
|
||||
#
|
||||
|
||||
AccessFileName .htaccess
|
||||
|
||||
#
|
||||
# The following lines prevent .htaccess and .htpasswd files from being
|
||||
# viewed by Web clients.
|
||||
#
|
||||
<FilesMatch "^\.ht">
|
||||
Require all denied
|
||||
</FilesMatch>
|
||||
|
||||
# Block .git composer and npm files
|
||||
|
||||
<FilesMatch "^composer\.(json|lock)">
|
||||
Require all denied
|
||||
</FilesMatch>
|
||||
<FilesMatch "^package(-lock)?\.json">
|
||||
Require all denied
|
||||
</FilesMatch>
|
||||
<FilesMatch "^\.">
|
||||
Require all denied
|
||||
</FilesMatch>
|
||||
<DirectoryMatch "^\.|\/\.">
|
||||
Require all denied
|
||||
</Directorymatch>
|
||||
|
||||
#
|
||||
# DefaultType is the default MIME type the server will use for a document
|
||||
# if it cannot otherwise determine one, such as from filename extensions.
|
||||
# If your server contains mostly text or HTML documents, "text/plain" is
|
||||
# a good value. If most of your content is binary, such as applications
|
||||
# or images, you may want to use "application/octet-stream" instead to
|
||||
# keep browsers from trying to display binary files as though they are
|
||||
# text.
|
||||
#
|
||||
# It is also possible to omit any default MIME type and let the
|
||||
# client's browser guess an appropriate action instead. Typically the
|
||||
# browser will decide based on the file's extension then. In cases
|
||||
# where no good assumption can be made, letting the default MIME type
|
||||
# unset is suggested instead of forcing the browser to accept
|
||||
# incorrect metadata.
|
||||
#
|
||||
DefaultType None
|
||||
|
||||
|
||||
#
|
||||
# HostnameLookups: Log the names of clients or just their IP addresses
|
||||
# e.g., www.apache.org (on) or 204.62.129.132 (off).
|
||||
# The default is off because it'd be overall better for the net if people
|
||||
# had to knowingly turn this feature on, since enabling it means that
|
||||
# each client request will result in AT LEAST one lookup request to the
|
||||
# nameserver.
|
||||
#
|
||||
HostnameLookups Off
|
||||
|
||||
# ErrorLog: The location of the error log file.
|
||||
# If you do not specify an ErrorLog directive within a <VirtualHost>
|
||||
# container, error messages relating to that virtual host will be
|
||||
# logged here. If you *do* define an error logfile for a <VirtualHost>
|
||||
# container, that host's errors will be logged there and not here.
|
||||
#
|
||||
ErrorLog ${APACHE_LOG_DIR}/error.log
|
||||
|
||||
#
|
||||
# LogLevel: Control the number of messages logged to the error_log.
|
||||
# Possible values include: debug, info, notice, warn, error, crit,
|
||||
# alert, emerg.
|
||||
#
|
||||
LogLevel warn
|
||||
|
||||
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
|
||||
LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b" common
|
||||
LogFormat "%{Referer}i -> %U" referer
|
||||
LogFormat "%{User-agent}i" agent
|
||||
SetEnvIf Remote_Addr "127\.0\.0\.1" loopback
|
||||
SetEnvIf Request_URI "^/haproxytest\.txt$" dontlog
|
||||
SetEnvIf Request_URI "^check_http" dontlog
|
||||
SetEnvIf Remote_Addr "127.0.0.1" dontlog
|
||||
SetEnvIf Remote_Addr "::1" dontlog
|
||||
|
||||
# Include generic snippets of statements
|
||||
SetEnvIf Remote_Addr "127\.0\.0\.1" loopback
|
||||
SetEnvIf Request_URI "^/haproxytest\.txt$" dontlog
|
||||
7
PHP8.5/PROD/conf/common-ports.conf
Normal file
7
PHP8.5/PROD/conf/common-ports.conf
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
# If you just change the port or add more ports here, you will likely also
|
||||
# have to change the VirtualHost statement in
|
||||
# /etc/apache2/sites-enabled/000-default.conf
|
||||
|
||||
Listen 80
|
||||
|
||||
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
|
||||
74
PHP8.5/PROD/conf/common-security.conf
Normal file
74
PHP8.5/PROD/conf/common-security.conf
Normal file
|
|
@ -0,0 +1,74 @@
|
|||
#
|
||||
# Disable access to the entire file system except for the directories that
|
||||
# are explicitly allowed later.
|
||||
#
|
||||
# This currently breaks the configurations that come with some web application
|
||||
# Debian packages.
|
||||
#
|
||||
#<Directory />
|
||||
# AllowOverride None
|
||||
# Order Deny,Allow
|
||||
# Deny from all
|
||||
#</Directory>
|
||||
|
||||
|
||||
# Changing the following options will not really affect the security of the
|
||||
# server, but might make attacks slightly more difficult in some cases.
|
||||
|
||||
#
|
||||
# ServerTokens
|
||||
# This directive configures what you return as the Server HTTP response
|
||||
# Header. The default is 'Full' which sends information about the OS-Type
|
||||
# and compiled in modules.
|
||||
# Set to one of: Full | OS | Minimal | Minor | Major | Prod
|
||||
# where Full conveys the most information, and Prod the least.
|
||||
#ServerTokens Minimal
|
||||
ServerTokens Prod
|
||||
#ServerTokens Full
|
||||
|
||||
#
|
||||
# Optionally add a line containing the server version and virtual host
|
||||
# name to server-generated pages (internal error documents, FTP directory
|
||||
# listings, mod_status and mod_info output etc., but not CGI generated
|
||||
# documents or custom error documents).
|
||||
# Set to "EMail" to also include a mailto: link to the ServerAdmin.
|
||||
# Set to one of: On | Off | EMail
|
||||
#ServerSignature Off
|
||||
ServerSignature Off
|
||||
|
||||
#
|
||||
# Allow TRACE method
|
||||
#
|
||||
# Set to "extended" to also reflect the request body (only for testing and
|
||||
# diagnostic purposes).
|
||||
#
|
||||
# Set to one of: On | Off | extended
|
||||
TraceEnable Off
|
||||
#TraceEnable On
|
||||
|
||||
#
|
||||
# Forbid access to version control directories
|
||||
#
|
||||
# If you use version control systems in your document root, you should
|
||||
# probably deny access to their directories. For example, for subversion:
|
||||
#
|
||||
#<DirectoryMatch "/\.svn">
|
||||
# Require all denied
|
||||
#</DirectoryMatch>
|
||||
|
||||
#
|
||||
# Setting this header will prevent MSIE from interpreting files as something
|
||||
# else than declared by the content type in the HTTP headers.
|
||||
# Requires mod_headers to be enabled.
|
||||
#
|
||||
#Header set X-Content-Type-Options: "nosniff"
|
||||
|
||||
#
|
||||
# Setting this header will prevent other sites from embedding pages from this
|
||||
# site as frames. This defends against clickjacking attacks.
|
||||
# Requires mod_headers to be enabled.
|
||||
#
|
||||
#Header set X-Frame-Options: "sameorigin"
|
||||
|
||||
|
||||
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
|
||||
1940
PHP8.5/PROD/conf/php.ini
Normal file
1940
PHP8.5/PROD/conf/php.ini
Normal file
File diff suppressed because it is too large
Load diff
16
PHP8.5/PROD/conf/vhost.conf
Normal file
16
PHP8.5/PROD/conf/vhost.conf
Normal file
|
|
@ -0,0 +1,16 @@
|
|||
<VirtualHost *:80>
|
||||
Protocols h2c http/1.1
|
||||
ServerAdmin contact@ldc.fr
|
||||
DocumentRoot /app/srcs/public
|
||||
|
||||
<Directory /app/srcs/public>
|
||||
Options +MultiViews -Indexes +FollowSymLinks
|
||||
AllowOverride All
|
||||
Require all granted
|
||||
|
||||
php_admin_value open_basedir "/usr/local/bin/php:/app/srcs/:/app/tmp/"
|
||||
php_admin_value upload_tmp_dir /app/tmp
|
||||
|
||||
SetEnvIf X_FORWARDED_PROTO https HTTPS=on
|
||||
</Directory>
|
||||
</VirtualHost>
|
||||
101
PHP8.5/QA/Dockerfile
Normal file
101
PHP8.5/QA/Dockerfile
Normal file
|
|
@ -0,0 +1,101 @@
|
|||
FROM php:8.5-cli-trixie
|
||||
|
||||
ARG http_proxy
|
||||
|
||||
ENV http_proxy=${http_proxy}
|
||||
ENV https_proxy=${http_proxy}
|
||||
ENV HTTP_PROXY=${http_proxy}
|
||||
ENV HTTPS_PROXY=${http_proxy}
|
||||
|
||||
RUN apt-get update -qq && \
|
||||
apt-get install -qy \
|
||||
# Common
|
||||
nano \
|
||||
vim \
|
||||
# GD
|
||||
libfreetype6-dev \
|
||||
libjpeg62-turbo-dev \
|
||||
libpng-dev \
|
||||
libwebp-dev \
|
||||
libxpm-dev \
|
||||
# INTL
|
||||
zlib1g-dev libicu-dev g++ \
|
||||
# XSL
|
||||
libxslt-dev \
|
||||
# ZIP
|
||||
libzip-dev \
|
||||
unzip \
|
||||
zip \
|
||||
#GMP
|
||||
libgmp-dev \
|
||||
# Imagick
|
||||
libmagick++-dev \
|
||||
libmagickwand-dev \
|
||||
# Memcached
|
||||
libmemcached-dev \
|
||||
# ldap
|
||||
ldap-utils libldap2-dev \
|
||||
# locales
|
||||
locales
|
||||
|
||||
# LOCALES
|
||||
ENV DEBIAN_FRONTEND=noninteractive
|
||||
RUN echo "fr_FR.UTF-8 UTF-8" > /etc/locale.gen && \
|
||||
locale-gen fr_FR.UTF-8 && \
|
||||
dpkg-reconfigure locales && \
|
||||
/usr/sbin/update-locale LANG=fr_FR.UTF-8
|
||||
ENV LC_ALL=fr_FR.UTF-8
|
||||
ENV LANG=fr_FR.UTF-8
|
||||
ENV LANGUAGE=fr_FR.UTF-8:fr
|
||||
# END LOCALES
|
||||
|
||||
RUN docker-php-ext-configure gd \
|
||||
--enable-gd \
|
||||
--with-webp \
|
||||
--with-jpeg \
|
||||
--with-xpm \
|
||||
--with-freetype
|
||||
|
||||
RUN docker-php-ext-configure intl
|
||||
RUN docker-php-ext-configure zip --with-zip
|
||||
RUN docker-php-ext-configure ldap
|
||||
RUN docker-php-ext-install exif gd gettext intl mysqli pdo_mysql xsl zip bcmath ldap gmp
|
||||
|
||||
# PECL PROXY HACK
|
||||
RUN if [ -n "${http_proxy}" ]; then \
|
||||
pear config-set http_proxy "${http_proxy}"; \
|
||||
fi
|
||||
|
||||
RUN pecl channel-update pecl.php.net
|
||||
|
||||
RUN pecl install imagick-3.8.1 && docker-php-ext-enable imagick
|
||||
RUN pecl install memcached-3.4.0 && docker-php-ext-enable memcached
|
||||
|
||||
# DEV
|
||||
RUN apt-get install -qy git
|
||||
|
||||
## DEPRECATED -> composer audit
|
||||
# local-php-security-checker
|
||||
RUN mkdir /tools && \
|
||||
curl -L https://github.com/fabpot/local-php-security-checker/releases/download/v2.0.4/local-php-security-checker_2.0.4_linux_amd64 -o /tools/local-php-security-checker && \
|
||||
chmod +x /tools/local-php-security-checker
|
||||
|
||||
ENV PATH="$PATH:/tools"
|
||||
|
||||
RUN pecl install pcov && docker-php-ext-enable pcov
|
||||
RUN curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer --version=2.9.5
|
||||
## NODE -> penser a bun
|
||||
RUN apt-get update -qq && \
|
||||
apt-get install -qy \
|
||||
ca-certificates curl gnupg \
|
||||
&& mkdir -p /etc/apt/keyrings \
|
||||
&& curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
|
||||
&& echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_24.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list
|
||||
## END NODE
|
||||
RUN apt-get update -qq && apt-get install -y nodejs && npm install -g audit-ci@^6
|
||||
#END DEV
|
||||
|
||||
RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
||||
COPY php-production.ini /usr/local/etc/php/conf.d/app.ini
|
||||
|
||||
WORKDIR /project
|
||||
1940
PHP8.5/QA/php-production.ini
Normal file
1940
PHP8.5/QA/php-production.ini
Normal file
File diff suppressed because it is too large
Load diff
Loading…
Add table
Reference in a new issue