# ============================================ # Laravel PHP-FPM 8.3 - Production Optimized # ============================================ # Stage 1: Builder with Composer FROM composer:2 AS composer-builder WORKDIR /app # Copy composer files first for better layer caching COPY composer.json composer.lock* ./ RUN composer install --no-dev --optimize-autoloader --no-interaction --prefer-dist # Stage 2: PHP-FPM Production Image FROM php:8.3-fpm-bookworm # Build arguments for dynamic user UID/GID ARG PUID=1000 ARG PGID=1000 # Labels LABEL maintainer="dev@local.dev" \ description="Laravel PHP-FPM 8.3 production container" # Install system dependencies RUN apt-get update && apt-get install -y --no-install-recommends \ curl \ libzip-dev \ libxml2-dev \ libcurl4-openssl-dev \ libgd-dev \ libfreetype6-dev \ libjpeg-dev \ libpng-dev \ libonig-dev \ libmcrypt-dev \ libsqlite3-dev \ unzip \ git \ && rm -rf /var/lib/apt/lists/* # Install PHP extensions RUN docker-php-ext-configure gd --with-freetype --with-jpeg \ && docker-php-ext-install -j$(nproc) \ pdo \ pdo_mysql \ mbstring \ xml \ curl \ zip \ gd \ opcache # Configure PHP for production RUN echo "opcache.enable=1" >> /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini \ && echo "opcache.memory_consumption=128" >> /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini \ && echo "opcache.interned_strings_buffer=8" >> /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini \ && echo "opcache.max_accelerated_files=10000" >> /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini \ && echo "opcache.revalidate_freq=2" >> /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini \ && echo "opcache.fast_shutdown=1" >> /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini \ && echo "upload_max_filesize=100M" >> /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini \ && echo "post_max_size=100M" >> /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini # Copy Composer from builder stage COPY --from=composer-builder /usr/bin/composer /usr/bin/composer COPY --from=composer-builder /root/.composer /root/.composer # Create Laravel storage directories with proper permissions RUN mkdir -p /var/www/html/storage/framework/{cache,sessions,views} \ && mkdir -p /var/www/html/storage/logs \ && mkdir -p /var/www/html/bootstrap/cache \ && chmod -R 775 /var/www/html/storage \ && chmod -R 775 /var/www/html/bootstrap/cache # Create system user for Laravel (dynamic UID/GID) RUN groupadd -g ${PGID} laravel && \ useradd -u ${PUID} -g laravel -m -s /bin/bash laravel # Set working directory WORKDIR /var/www/html # Copy application files COPY --chown=laravel:laravel . /var/www/html # Fix storage permissions RUN chown -R laravel:laravel /var/www/html/storage \ && chown -R laravel:laravel /var/www/html/bootstrap/cache \ && chmod -R 775 /var/www/html/storage \ && chmod -R 775 /var/www/html/bootstrap/cache # Switch to non-root user USER laravel # Expose port 9000 (PHP-FPM) EXPOSE 9000 # Health check HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD php-fpm-healthcheck || exit 1 # Create healthcheck script RUN echo '#!/bin/sh' > /usr/local/bin/php-fpm-healthcheck \ && echo 'SCRIPT_NAME=/health.php SCRIPT_FILENAME=/health.php REQUEST_METHOD=GET cgi-fcgi -bind -connect 127.0.0.1:9000 > /dev/null 2>&1' >> /usr/local/bin/php-fpm-healthcheck \ && chmod +x /usr/local/bin/php-fpm-healthcheck CMD ["php-fpm"]