|
| 1 | +# PHP-Apache Debian 12 (Bookworm) |
| 2 | + |
| 3 | +This is an Apache and php-fpm image: |
| 4 | + |
| 5 | +- Base: Debian 12 (Bookworm) |
| 6 | +- Apache httpd: 2.4 |
| 7 | +- PHP: 8.2 |
| 8 | + |
| 9 | +This image is designed to be quite configurable and as such is good for getting |
| 10 | +started but probably not a great base if you want a highly optimised container. |
| 11 | +This image also expects to be used behind a load balancer and as such does not |
| 12 | +listen on port 80 but instead port 8000. Also make note of how to handle SSL |
| 13 | +offloading to the load balancer and how this affects .htaccess rules. |
| 14 | + |
| 15 | +## Options: |
| 16 | + |
| 17 | +All options are optional. |
| 18 | +The values shown here are the defaults. The options listed here are also case sensitive. |
| 19 | + |
| 20 | +### Global |
| 21 | + |
| 22 | +``` |
| 23 | +timeout = 30 |
| 24 | +TZ = UTC |
| 25 | +``` |
| 26 | + |
| 27 | +### HTTPD |
| 28 | + |
| 29 | +``` |
| 30 | +httpd_remoteipheader = X-Forwarded-For |
| 31 | +httpd_remoteipinternalproxy = (unset) |
| 32 | + |
| 33 | +# Subdirectory within the git repository that contains the site root eg 'www' |
| 34 | +httpd_root = (unset) |
| 35 | + |
| 36 | +# If unset the following is used |
| 37 | +RemoteIPInternalProxy 10.0.0.0/8 |
| 38 | +RemoteIPInternalProxy 172.16.0.0/12 |
| 39 | +RemoteIPInternalProxy 192.168.0.0/16 |
| 40 | +``` |
| 41 | + |
| 42 | +### PHP/PHP-FPM |
| 43 | + |
| 44 | +``` |
| 45 | +phpopts_ = (unset) |
| 46 | + |
| 47 | +# phpopts Examples |
| 48 | +phpopts_short_open_tag = off |
| 49 | +phpopts_post_max_size = 8M |
| 50 | +phpopts_upload_max_filesize = 2M |
| 51 | +phpopts_memory_limit = 128M |
| 52 | + |
| 53 | +# PHP Cache options |
| 54 | +php_cache = (opcache|none) default is opcache, none doesn't load any cache extensions. |
| 55 | +php_apc_shm_size = 64M # This is for the apcu extension |
| 56 | +php_opcache_memory_consumption = 128 |
| 57 | +php_opcache_revalidate_freq = 2 |
| 58 | +
|
| 59 | +# PHP Session options |
| 60 | +php_session_save_handler = (unset) |
| 61 | +php_session_save_path = (unset) |
| 62 | +
|
| 63 | +# PHP Session examples |
| 64 | +php_session_save_handler = redis |
| 65 | +php_session_save_path = "tcp://host1:6379?weight=1, tcp://host2:6379?weight=2&timeout=2.5, tcp://host3:6379?weight=2" |
| 66 | +
|
| 67 | +php_session_save_handler = memcached |
| 68 | +php_session_save_path = "host:11211" |
| 69 | +
|
| 70 | +# PHP-FPM options |
| 71 | +phpfpm_pm_max_children = 3 |
| 72 | +phpfpm_pm_max_requests = 500 |
| 73 | +``` |
| 74 | +
|
| 75 | +### Email/msmtp |
| 76 | +
|
| 77 | +msmtp expects a from address to be set either via environment variable (`msmtp_from`) or |
| 78 | +in the php mail() function. eg. `mail('nobody@example.com', 'the subject', |
| 79 | +'the message', null, '-fwebmaster@example.com');` |
| 80 | +
|
| 81 | +msmtp also need a host to send email via, it does not queue and forward mail |
| 82 | +like postfix or exim. This could be defined via a docker link `--link |
| 83 | +smtp:smtp` |
| 84 | +
|
| 85 | +``` |
| 86 | +msmtp_host = SMTP_PORT_25_TCP_ADDR or mail |
| 87 | +msmtp_port = SMTP_PORT_25_TCP_PORT or 25 |
| 88 | +msmtp_from = (unset) |
| 89 | +msmtp_user = (unset) |
| 90 | +msmtp_pass = (unset) |
| 91 | +``` |
| 92 | +
|
| 93 | +## PHP Pre Execution |
| 94 | +
|
| 95 | +PHP pre-execution helpers are included in this image. See |
| 96 | +[PHP Extras](https://github.com/panubo/php-extras) for more information. |
| 97 | +
|
| 98 | +Set `auto_prepend_file=xxxx_prepend.php` to enable. |
| 99 | +
|
| 100 | +## SSL Offloading |
| 101 | +
|
| 102 | +This container should be used behind a load balancing reverse proxy and as such |
| 103 | +SSL should be offloaded to the load balancer. However, this can cause issues |
| 104 | +when your applications want to know if they are being served over SSL as the |
| 105 | +local webserver cannot determine this. Below are workarounds for the two most common |
| 106 | +issues. |
| 107 | +
|
| 108 | +If you want to redirect users from a non-ssl connection to a SSL connection with |
| 109 | +htaccess and mod_rewrite the following rules work both behind an SSL offloading |
| 110 | +load balancer and also when the local webserver is handling the SSL. |
| 111 | +
|
| 112 | +``` |
| 113 | +<IfModule mod_rewrite.c> |
| 114 | + RewriteEngine on |
| 115 | + RewriteCond %{HTTP:X-Forwarded-Proto} !=https |
| 116 | + RewriteCond %{HTTPS} !=on |
| 117 | + RewriteRule ^(.*) https://%{HTTP_HOST}/$1 [R=301,L] |
| 118 | +</IfModule> |
| 119 | +``` |
| 120 | +
|
| 121 | +Some PHP application also check they are running on an SSL connection. As the |
| 122 | +local webserver doesn't set $_SERVER['HTTPS'] correctly when behind a proxy the |
| 123 | +following code can be used to fix the issue. |
| 124 | + |
| 125 | +```php |
| 126 | +/* Set _SERVER['HTTPS'] correctly when behind a proxy setting HTTP_X_FORWARDED_PROTO */ |
| 127 | +if (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') { |
| 128 | + $_SERVER['HTTPS'] = 'on'; |
| 129 | +} |
| 130 | +``` |
| 131 | + |
| 132 | +or set `auto_prepend_file=SSLHelper_prepend.php` to use the SSL Helper from the [PHP Extras](https://github.com/panubo/php-extras) repo. |
0 commit comments