Dockerfile

FROM serversideup/php:8.1-fpm-apache

USER root

# persistent dependencies
RUN set -eux; \
  apt-get update; \
  apt-get install -y --no-install-recommends \
  # Ghostscript is required for rendering PDF previews
  ghostscript \
  ; \
  rm -rf /var/lib/apt/lists/*

# Install the latest New Relic PHP Agent
# https://docs.newrelic.com/docs/apm/agents/php-agent/advanced-installation/docker-other-container-environments-install-php-agent/#dockerfile-example
RUN \
  cd /tmp \
  # Discover the latest released version:
  && export NEW_RELIC_AGENT_VERSION=$(curl -s https://download.newrelic.com/php_agent/release/ | grep -o '[1-9][0-9]\?\(\.[0-9]\+\)\{3\}' | head -n1) \
  # Discover libc provider
  && export NR_INSTALL_PLATFORM=$(ldd --version 2>&1 | grep -q musl && echo "linux-musl" || echo "linux") \
  # Download the discovered version:
  && curl -o newrelic-php-agent.tar.gz https://download.newrelic.com/php_agent/release/newrelic-php5-${NEW_RELIC_AGENT_VERSION}-${NR_INSTALL_PLATFORM}.tar.gz \
  # Install the downloaded agent:
  && tar xzf newrelic-php-agent.tar.gz \
  && NR_INSTALL_USE_CP_NOT_LN=1 NR_INSTALL_SILENT=0 ./*/newrelic-install install \
  # Configure the agent to use license key from NEW_RELIC_LICENSE_KEY env var:
  && sed -ie 's/[ ;]*newrelic.license[[:space:]]=.*/newrelic.license=${NEW_RELIC_LICENSE_KEY}/' $(php-config --ini-dir)/newrelic.ini \
  # Configure the agent to use app name from NEW_RELIC_APP_NAME env var:
  && sed -ie 's/[ ;]*newrelic.appname[[:space:]]=.*/newrelic.appname=${NEW_RELIC_APP_NAME}/' $(php-config --ini-dir)/newrelic.ini \
  # Cleanup temporary files:
  && rm newrelic-php-agent.tar.gz && rm -rf newrelic-php5-*-linux \
  # Set ownership
  && touch /var/log/newrelic/newrelic-daemon.log \
  && chown -R www-data:www-data /var/log/newrelic \
  && touch /var/run/newrelic-daemon.pid \
  && chown www-data:www-data /var/run/newrelic-daemon.pid

# install the PHP extensions we need (https://make.wordpress.org/hosting/handbook/handbook/server-environment/#php-extensions)
RUN set -ex; \
  \
  savedAptMark="$(apt-mark showmanual)"; \
  \
  apt-get update; \
  apt-get install -y --no-install-recommends \
  libavif-dev \
  libfreetype6-dev \
  libicu-dev \
  libjpeg-dev \
  libmagickwand-dev \
  libpng-dev \
  libwebp-dev \
  libzip-dev \
  ; \
  \
  docker-php-ext-configure gd \
  --with-avif \
  --with-freetype \
  --with-jpeg \
  --with-webp \
  ; \
  docker-php-ext-install -j "$(nproc)" \
  bcmath \
  exif \
  gd \
  intl \
  mysqli \
  zip \
  ; \
  # https://pecl.php.net/package/imagick
  pecl install imagick-3.8.0; \
  docker-php-ext-enable imagick; \
  rm -r /tmp/pear; \
  \
  # some misbehaving extensions end up outputting to stdout 🙈 (https://github.com/docker-library/wordpress/issues/669#issuecomment-993945967)
  out="$(php -r 'exit(0);')"; \
  [ -z "$out" ]; \
  err="$(php -r 'exit(0);' 3>&1 1>&2 2>&3)"; \
  [ -z "$err" ]; \
  \
  extDir="$(php -r 'echo ini_get("extension_dir");')"; \
  [ -d "$extDir" ]; \
  # reset apt-mark's "manual" list so that "purge --auto-remove" will remove all build dependencies
  apt-mark auto '.*' > /dev/null; \
  apt-mark manual $savedAptMark; \
  ldd "$extDir"/*.so \
  | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' \
  | sort -u \
  | xargs -r dpkg-query --search \
  | cut -d: -f1 \
  | sort -u \
  | xargs -rt apt-mark manual; \
  \
  apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
  rm -rf /var/lib/apt/lists/*; \
  \
  ! { ldd "$extDir"/*.so | grep 'not found'; }; \
  # check for output like "PHP Warning:  PHP Startup: Unable to load dynamic library 'foo' (tried: ...)
  err="$(php --version 3>&1 1>&2 2>&3)"; \
  [ -z "$err" ]

# set recommended PHP.ini settings
# see https://secure.php.net/manual/en/opcache.installation.php
RUN set -eux; \
  docker-php-ext-enable opcache; \
  { \
  echo 'opcache.memory_consumption=128'; \
  echo 'opcache.interned_strings_buffer=8'; \
  echo 'opcache.max_accelerated_files=4000'; \
  echo 'opcache.revalidate_freq=2'; \
  } > /usr/local/etc/php/conf.d/opcache-recommended.ini
# https://wordpress.org/support/article/editing-wp-config-php/#configure-error-logging
RUN { \
  # https://www.php.net/manual/en/errorfunc.constants.php
  # https://github.com/docker-library/wordpress/issues/420#issuecomment-517839670
  echo 'error_reporting = E_ERROR | E_WARNING | E_PARSE | E_CORE_ERROR | E_CORE_WARNING | E_COMPILE_ERROR | E_COMPILE_WARNING | E_RECOVERABLE_ERROR'; \
  echo 'display_errors = Off'; \
  echo 'display_startup_errors = Off'; \
  echo 'log_errors = On'; \
  echo 'error_log = /dev/stderr'; \
  echo 'log_errors_max_len = 1024'; \
  echo 'ignore_repeated_errors = On'; \
  echo 'ignore_repeated_source = Off'; \
  echo 'html_errors = Off'; \
  } > /usr/local/etc/php/conf.d/error-logging.ini

RUN set -eux; \
  a2enmod rewrite expires; \
  \
  # https://httpd.apache.org/docs/2.4/mod/mod_remoteip.html
  a2enmod remoteip; \
  { \
  echo 'RemoteIPHeader X-Forwarded-For'; \
  # these IP ranges are reserved for "private" use and should thus *usually* be safe inside Docker
  echo 'RemoteIPInternalProxy 10.0.0.0/8'; \
  echo 'RemoteIPInternalProxy 172.16.0.0/12'; \
  echo 'RemoteIPInternalProxy 192.168.0.0/16'; \
  echo 'RemoteIPInternalProxy 169.254.0.0/16'; \
  echo 'RemoteIPInternalProxy 127.0.0.0/8'; \
  } > /etc/apache2/conf-available/remoteip.conf; \
  a2enconf remoteip; \
  # https://github.com/docker-library/wordpress/issues/383#issuecomment-507886512
  # (replace all instances of "%h" with "%a" in LogFormat)
  find /etc/apache2 -type f -name '*.conf' -exec sed -ri 's/([[:space:]]*LogFormat[[:space:]]+"[^"]*)%h([^"]*")/\1%a\2/g' '{}' +

# # Install Composer and extensions
# COPY --from=composer:latest /usr/bin/composer /usr/bin/composer

# Copy WordPress
COPY . /var/www/html

# Install PHP dependencies
RUN cd /var/www/html ; composer install --no-dev --optimize-autoloader

RUN set -eux; \
  # version='6.8.1'; \
  # sha1='52d5f05c96a9155f78ed84700264307e5dea14b4'; \
  # \
  # curl -o wordpress.tar.gz -fL "https://wordpress.org/wordpress-$version.tar.gz"; \
  # echo "$sha1 *wordpress.tar.gz" | sha1sum -c -; \
  # \
  # # upstream tarballs include ./wordpress/ so this gives us /usr/src/wordpress
  # tar -xzf wordpress.tar.gz -C /usr/src/; \
  # rm wordpress.tar.gz; \
  # \
  # https://wordpress.org/support/article/htaccess/
  # [ ! -e /var/www/html/.htaccess ]; \
  # { \
  # echo '# BEGIN WordPress'; \
  # echo ''; \
  # echo 'RewriteEngine On'; \
  # echo 'RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]'; \
  # echo 'RewriteBase /'; \
  # echo 'RewriteRule ^index\.php$ - [L]'; \
  # echo 'RewriteCond %{REQUEST_FILENAME} !-f'; \
  # echo 'RewriteCond %{REQUEST_FILENAME} !-d'; \
  # echo 'RewriteRule . /index.php [L]'; \
  # echo ''; \
  # echo '# END WordPress'; \
  # } > /var/www/html/.htaccess; \
  # \
  chown -R www-data:www-data /var/www/html
VOLUME /var/www/html

# COPY --chown=www-data:www-data wp-config-docker.php /usr/src/wordpress/
# COPY docker-entrypoint.sh /usr/local/bin/
# https://github.com/docker-library/wordpress/issues/969
RUN ln -svfT docker-entrypoint.sh /usr/local/bin/docker-ensure-installed.sh

RUN curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
RUN chmod +x wp-cli.phar
RUN mv wp-cli.phar /usr/local/bin/wp

USER www-data

# ENTRYPOINT ["docker-entrypoint.sh"]
# CMD ["/init"]