First Commit

2026-07-03 16:42:22 +03:00
commit b16413ff9a
125 changed files with 20420 additions and 0 deletions
@@ -0,0 +1,134 @@
+# ── Stage 1: Composer deps ───────────────────────────────────────────────────
+FROM composer:2 AS composer-build
+WORKDIR /app
+COPY composer.json composer.lock ./
+RUN composer install \
+    --no-dev \
+    --no-interaction \
+    --no-scripts \
+    --prefer-dist \
+    --optimize-autoloader \
+    --ignore-platform-reqs
+
+# ── Stage 2a: Vite dev (node_modules only, no build) ─────────────────────────
+FROM node:22-alpine AS vite-dev
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci --ignore-scripts
+
+# ── Stage 2b: Node / Vite build ──────────────────────────────────────────────
+FROM node:22-alpine AS node-build
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci --ignore-scripts
+COPY . .
+COPY --from=composer-build /app/vendor ./vendor
+RUN npm run build
+
+# ── Stage 3: PHP base (Ubuntu + ondrej/php — pre-compiled, no source builds) ─
+FROM ubuntu:24.04 AS php-base
+
+ENV DEBIAN_FRONTEND=noninteractive
+ENV TZ=UTC
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends software-properties-common ca-certificates gnupg curl \
+    && add-apt-repository ppa:ondrej/php \
+    && curl -fsSL https://www.postgresql.org/media/keys/ACCC4CF8.asc \
+        | gpg --dearmor -o /usr/share/keyrings/pgdg.gpg \
+    && echo "deb [signed-by=/usr/share/keyrings/pgdg.gpg] https://apt.postgresql.org/pub/repos/apt noble-pgdg main" \
+        > /etc/apt/sources.list.d/pgdg.list \
+    && apt-get update \
+    && apt-get install -y --no-install-recommends \
+        php8.5-fpm \
+        php8.5-cli \
+        php8.5-pgsql \
+        php8.5-intl \
+        php8.5-zip \
+        php8.5-gd \
+        php8.5-bcmath \
+        php8.5-imagick \
+        php8.5-exif \
+        php8.5-mbstring \
+        php8.5-xml \
+        php8.5-curl \
+        php8.5-redis \
+        postgresql-client-18 \
+    && rm -rf /var/lib/apt/lists/* \
+    && mkdir -p /run/php \
+    && sed -i 's|listen = /run/php/php8.5-fpm.sock|listen = 9000|' /etc/php/8.5/fpm/pool.d/www.conf \
+    && echo "clear_env = no" >> /etc/php/8.5/fpm/pool.d/www.conf
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends php8.5-dev php-pear autoconf gcc make \
+    && pecl install opentelemetry \
+    && echo "extension=opentelemetry.so" > /etc/php/8.5/mods-available/opentelemetry.ini \
+    && phpenmod opentelemetry \
+    && apt-get purge -y --auto-remove php8.5-dev php-pear autoconf gcc make \
+    && rm -rf /var/lib/apt/lists/*
+
+# ── Stage 4: Production ───────────────────────────────────────────────────────
+FROM php-base AS production
+
+COPY docker/php/php.ini /etc/php/8.5/fpm/conf.d/99-app.ini
+COPY docker/php/php.ini /etc/php/8.5/cli/conf.d/99-app.ini
+COPY docker/php/fpm-pool.conf /etc/php/8.5/fpm/pool.d/zz-app.conf
+
+WORKDIR /var/www/html
+
+COPY --from=composer-build /app/vendor ./vendor
+COPY --from=node-build /app/public/build ./public/build
+COPY . .
+
+RUN chown -R www-data:www-data storage bootstrap/cache \
+    && chmod -R 775 storage bootstrap/cache
+
+# Package discovery and asset publishing are fully determined by composer.lock + code,
+# so they belong in the image, not in every container's entrypoint. Only asset-type
+# tags are force-republished here — config tags (core-config, lunar) are a deliberate
+# one-time `vendor:publish` step you run and commit by hand, since re-running them would
+# silently overwrite any local edits to config/core.php or config/lunar/*.php.
+RUN php artisan package:discover --ansi \
+    && php artisan vendor:publish --tag=core-assets --force --ansi \
+    && php artisan vendor:publish --tag=public --force --ansi \
+    && php artisan filament:assets --ansi
+
+COPY docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+EXPOSE 9000
+ENTRYPOINT ["/entrypoint.sh"]
+CMD ["php-fpm8.5", "-F"]
+
+# ── Stage 5: Nginx (public assets baked in from production) ──────────────────
+FROM nginx:alpine AS nginx
+
+COPY docker/nginx/prod.conf /etc/nginx/conf.d/default.conf
+COPY --from=production /var/www/html/public /var/www/html/public
+
+# ── Stage 6: Development ──────────────────────────────────────────────────────
+FROM php-base AS development
+
+RUN apt-get update && apt-get install -y --no-install-recommends git unzip curl \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
+
+COPY docker/php/php.dev.ini /etc/php/8.5/fpm/conf.d/99-app.ini
+COPY docker/php/php.dev.ini /etc/php/8.5/cli/conf.d/99-app.ini
+
+WORKDIR /var/www/html
+
+COPY composer.json composer.lock ./
+RUN composer install \
+    --no-interaction \
+    --no-scripts \
+    --prefer-dist \
+    --ignore-platform-reqs
+
+COPY docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+EXPOSE 9000
+ENTRYPOINT ["/entrypoint.sh"]
+CMD ["php-fpm8.5", "-F"]