Commit graph

52 commits

Author SHA1 Message Date
El RIDO
4cec4761ef
upgrade to PHP 8.4 packages
composer related packages need to stay at PHP 8.3 until the composer package gets upgrade in Alpine - they get removed again at the end of the image build
2025-02-01 12:02:25 +01:00
El RIDO
53c3e60b9b
with s6 2.13.1.0 binaries live in /usr/bin instead of /bin
this change makes the entrypoint script PATH dependent, but agnostic to the real location of the s6-svcscan binary, so it work both for alpine 3.20 as well as edge / future stable alpine releases

see d348893ddf (bc2914fbfe731ad6ff1eb5c019c39433c87bcaf5_22_24)
2024-10-19 10:11:19 +02:00
El RIDO
b71945e5e0
enable custom env var passthrough & document usage 2024-06-13 19:39:49 +02:00
El RIDO
e6bcd5d5ea
remove deprecated, as of 8.3, option 2023-12-09 13:51:22 +01:00
El RIDO
8c00b28528
upgrade to PHP 8.3 2023-12-09 13:50:35 +01:00
Felipe Nakandakari
16fb8caa2f
Add AWS_DEFAULT_REGION env var 2023-07-10 19:18:41 +10:00
Felipe Nakandakari
db69f83acc
Support more AWS related env vars 2023-07-10 19:08:14 +10:00
El RIDO
4e66fbe35e upgrade to PHP 8.2 2023-05-21 10:33:48 +02:00
El RIDO
3e380f2a41 php config stability, addresses #147 2023-05-21 10:15:29 +02:00
Noah Betzen
474bc19904
Add commented HSTS line to nginx site.conf 2023-03-30 17:04:11 -07:00
El RIDO
d29817213a support AWS access tokens & some documentation 2023-02-28 05:53:49 +01:00
El RIDO
e96787428d
upgrade to PHP 8.1 2022-11-05 08:09:58 +01:00
El RIDO
8796735e80
issue got moved
Co-authored-by: rugk <rugk+git@posteo.de>
2022-07-31 18:15:36 +02:00
El RIDO
d6cead99eb
disable header preventing opening links to self, fixes #959 2022-07-31 08:49:36 +02:00
El RIDO
90e746b111
remove duplicate Permission-Policy header, now set on the application level
6f3bb25b09
2022-07-18 18:11:45 +02:00
El RIDO
4afa86cb3e
move headers to static location block, makes fastcgi_hide_header unnecessary 2021-10-14 19:27:04 +02:00
El RIDO
25abb55cd0
move Cache-Control header to server block, making js location unnecessary 2021-10-13 19:55:02 +02:00
rugk
df4436b798
Fix syntax error in nginx config
This prevented the startup of the nginx server and thus the container.

Fixes https://github.com/PrivateBin/docker-nginx-fpm-alpine/issues/75
2021-10-09 17:24:10 +02:00
Sylvain Rabot
90b0271bf2
Add Cache-Control header with no-transform directive
This should avoid that proxies like Cloudflare and others break SRI.

Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
2021-10-08 13:39:34 +02:00
El RIDO
1f998aab8a
remove s6-linux-init & s6-rc from stack 2021-09-07 07:27:02 +02:00
El RIDO
fcfa332495
preserve environment for PHP, adresses regression reported in #62 2021-08-19 10:15:52 +02:00
El RIDO
861a91f0b6
switch from s6-overlay to s6-rc, fixes #57 2021-08-09 21:12:16 +02:00
El RIDO
7e1fc11be3
Merge pull request #38 from binxio/add-gcs-support
pass in GoogleCloudStorage required environment variable
2021-07-03 08:46:24 +02:00
El RIDO
8539ee0e6e
wait for up to 10 seconds on the php-fpm socket to come up, before starting nginx 2021-06-05 07:49:07 +02:00
Mark van Holsteijn
bcb52002aa do not start nginx until /var/run/php-fpm.sock is available 2021-06-04 22:12:52 +02:00
Mark van Holsteijn
be11f9b1b2 pass in GoogleCloudStorage required environment variables 2021-05-24 15:05:05 +02:00
El RIDO
0928070a04
allow image to run as any non-root user/group, fixes #10 2021-04-28 18:29:58 +02:00
El RIDO
453cff7c01
working on improving #29 2021-04-16 19:13:00 +02:00
El RIDO
7b367cad23
new security headers, recommended by ZAP scan #29 2021-04-05 18:21:55 +02:00
El RIDO
25104d083f
adapt to new nginx 1.18 folder structure 2021-01-17 09:13:47 +01:00
El RIDO
b5c2b4d1fe
switch to packaged s6-overlay, shaving off one MiB from the image 2021-01-17 08:54:28 +01:00
El RIDO
798992cb0e
upgrade to PHP 8 2021-01-16 06:23:37 +01:00
El RIDO
9582113c42
enable ipv6 listening 2020-04-28 07:13:40 +02:00
El RIDO
d83d136f45
remove backwards compatibility with port 80 to drop setcap use, closes #15 2020-04-28 07:10:27 +02:00
El RIDO
79b2d68bf7
updating paths for Alpine 3.11 2019-12-21 16:38:01 +01:00
El RIDO
0c1a2e565c
changing default port to 8080, keeping port 80 for backwards compatibility. updating documentation. ensure the image can be run as root user and services drop privileges, fixes #11 2019-12-07 09:20:39 +01:00
El RIDO
d393fc5c89
increasing file upload support to 10 MiB, the new default in PrivateBin 1.3.1 and documenting how this can be increased further, fixes #7 2019-09-23 07:42:14 +02:00
El RIDO
a1d92a013e
switching from supervisord to s6-overlay, less dependencies and lets us run as non-root 2019-09-23 07:19:50 +02:00
El RIDO
dba458cad9
with alpine 3.10 we have version parity with the php image, so a smaller image with minimal dependencies is possible 2019-06-24 21:19:09 +02:00
El RIDO
93da5b24a8 Allow up to 3 MiB payload in nginx, privatebin defaults to 2 MiB 2018-06-19 13:23:28 +02:00
El RIDO
f18e51f132 privilege separation, ensuring nginx may access it's own tmp folder and only read /var/www 2018-06-19 13:16:07 +02:00
Simon Rupf
14ea837229 switching to unix socket for communication between nginx & php-fpm, improves performance and fixes #1 2018-06-03 20:33:50 +02:00
El RIDO
aa1cabad94 trimmed down docker image, added GD support, enabled file upload 2018-05-27 23:22:08 +02:00
Michael Contento
40cb55b3d5 Move default access_log config into own overwritable file 2017-04-27 16:02:19 +02:00
Michael Contento
7078cdfe7d Ensure nginx writes properly to stdout/stderr 2017-04-27 15:04:55 +02:00
Michael Contento
54c2021348 Sort php-fpm configs and add ENV_WHITELIST option 2017-04-27 14:17:43 +02:00
Michael Contento
8fc2924cb7 Don't log supervisord messages twice 2017-04-27 09:19:54 +02:00
Michael Contento
4b6ebf31c6 Add custom "hook folders" /etc/nginx/{server.d,location.d} 2017-03-29 19:40:24 +02:00
Michael Contento
023f04c7a4 refactor REDIRECT_PROTO and add some examples 2017-03-29 19:23:29 +02:00
Michael Contento
a0929f0059 support php for nested routes 2017-03-28 21:28:32 +02:00