refactor: upgrade to PHP 8.4.10

Author: Alcides Ramos

README.md

@@ -14,7 +14,7 @@
 
 ## Summary
 
-This repository contains a _dockerized_ environment for building PHP applications based on **php:8.3.2-fpm-alpine** with Caddy support.
+This repository contains a _dockerized_ environment for building PHP applications based on **php:8.4.10-fpm-alpine** with Caddy support.
 
 ### Highlights
 

docker/Dockerfile

@@ -4,7 +4,7 @@
 # STAGE: BASE-IMAGE
 #----------------------------------------------------------
 
-FROM php:8.3.2-fpm-alpine AS base-image
+FROM php:8.4.10-fpm-alpine AS base-image
 
 #----------------------------------------------------------
 # STAGE: COMMON
@@ -42,7 +42,6 @@ FROM extensions-builder-required AS extensions-builder-development
 
 # Add, compile and configure PHP extensions
 RUN curl -sSL https://github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions -o - | sh -s \
-        uopz \
         xdebug
 
 #----------------------------------------------------------
@@ -59,7 +58,7 @@ ARG HOST_GROUP_NAME=host-groupname
 ENV ENV=DEVELOPMENT
 
 # Add __ONLY__ compiled extensions & their config files
-COPY --from=extensions-builder-development /usr/local/lib/php/extensions/*/* /usr/local/lib/php/extensions/no-debug-non-zts-20230831/
+COPY --from=extensions-builder-development /usr/local/lib/php/extensions/*/* /usr/local/lib/php/extensions/no-debug-non-zts-20240924/
 COPY --from=extensions-builder-development /usr/local/etc/php/conf.d/* /usr/local/etc/php/conf.d/
 
 # Add Composer from public Docker image
@@ -142,7 +141,7 @@ FROM common AS build-production
 ENV ENV=PRODUCTION
 
 # Add __ONLY__ compiled extensions & their config files
-COPY --from=extensions-builder-required /usr/local/lib/php/extensions/*/* /usr/local/lib/php/extensions/no-debug-non-zts-20230831/
+COPY --from=extensions-builder-required /usr/local/lib/php/extensions/*/* /usr/local/lib/php/extensions/no-debug-non-zts-20240924/
 COPY --from=extensions-builder-required /usr/local/etc/php/conf.d/* /usr/local/etc/php/conf.d/
 
 # Add the optimized for production application

docker/caddy/Caddyfile

@@ -5,14 +5,13 @@
 import snippets/*
 
 {$CADDY_HOSTNAME} {
-    import strip-www
+    #import bearer-token
     import common
-    import cache
-    import security
-    import ssl
+    import header
     import not-found
+    import php-fastcgi
+    import remove-www
+    import ssl
 
     root * /var/www/html/public
-
-    import php-fastcgi
 }

docker/caddy/snippets/bearer-token

@@ -0,0 +1,15 @@
+(bearer-token) {
+    @authorized {
+        header Authorization "{$CADDY_AUTHORIZATION_METHOD} {$CADDY_AUTHORIZATION_TOKEN}"
+    }
+
+    @unauthorized {
+        not {
+            header Authorization "{$CADDY_AUTHORIZATION_METHOD} {$CADDY_AUTHORIZATION_TOKEN}"
+        }
+    }
+
+    respond @unauthorized "Unauthorized" 401 {
+        close
+    }
+}

docker/caddy/snippets/cache

@@ -0,0 +1,68 @@
+(header) {
+    header {
+        # CORS
+
+		Vary Origin
+		Access-Control-Allow-Origin "{header.origin}"
+		Access-Control-Expose-Headers "Authorization"
+		Access-Control-Allow-Credentials "true"
+
+        # CACHE
+
+        Cache-Control "public, max-age=31536000"
+
+        # SECURITY
+
+        Strict-Transport-Security "max-age=31536000;includeSubDomains;preload"
+
+        Referrer-Policy "no-referrer-when-downgrade"
+
+        Content-Security-Policy "upgrade-insecure-requests"
+
+        X-Forwarded-For {http.request.remote.host}
+        X-Content-Type-Options "nosniff"
+        ?X-Frame-Options "SAMEORIGIN"
+        ?X-XSS-Protection "1;mode=block"
+
+        Permissions-Policy "autoplay=(self),camera=(),geolocation=(),microphone=(),payment=(),usb=()"
+        Feature-Policy "accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'self'; camera 'none'; encrypted-media 'none'; fullscreen 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture *; speaker 'none'; sync-xhr 'none'; usb 'none'; vr 'none'"
+
+        -Server
+        -X-Powered-By
+    }
+
+    # SECURITY
+
+    @excludedMethods {
+        not method GET HEAD POST OPTIONS
+    }
+    respond @excludedMethods "Not Allowed" 405 {
+        close
+    }
+
+    # CACHE
+
+    @static {
+        file
+        path *.avif *.ico *.css *.js *.gz *.eot *.ttf *.otf *.gif *.webp *.avif *.jpg *.jpeg *.png *.svg *.woff *.woff2 *.pdf
+    }
+    header @static Cache-Control "max-age=31536000,public,inmutable"
+
+    @html {
+        path *.html *.htm
+    }
+    header @html {
+        Cache-Control "public, max-age=43200"
+    }
+
+    # CORS
+
+    @cors_preflight method OPTIONS
+    handle @cors_preflight {
+        header {
+            Access-Control-Allow-Methods "GET, POST, PUT, PATCH, DELETE"
+            Access-Control-Max-Age "3600"
+        }
+        respond "" 204
+    }
+}

docker/caddy/snippets/header

@@ -0,0 +1,7 @@
+(remove-www) {
+    @strip_www {
+        header_regexp www Host ^www\.(.*)$
+    }
+
+    redir @strip_www http://{http.regexp.www.1}{uri}
+}

docker/caddy/snippets/remove-www

@@ -45,7 +45,6 @@
         "phpmd/phpmd": "^2.15",
         "phpstan/phpstan": "^1.10",
         "phpunit/phpunit": "^11.0",
-        "slope-it/clock-mock": "^0.4.0",
         "squizlabs/php_codesniffer": "^3.9",
         "symfony/var-dumper": "^7.0"
     },