feat: add nc 34
Cette révision appartient à :
@@ -0,0 +1,207 @@
|
||||
ARG NC_VERS
|
||||
|
||||
############################
|
||||
# STAGE 1 ? BUILD
|
||||
############################
|
||||
FROM php:8.4-apache-trixie AS build
|
||||
|
||||
ARG NC_VERS
|
||||
ENV NEXTCLOUD_VERSION=${NC_VERS}
|
||||
|
||||
RUN set -eux; \
|
||||
apt-get update; \
|
||||
apt-get install -y --no-install-recommends \
|
||||
build-essential \
|
||||
libcurl4-openssl-dev \
|
||||
libevent-dev \
|
||||
libfreetype6-dev \
|
||||
libicu-dev \
|
||||
libjpeg-dev \
|
||||
libldap2-dev \
|
||||
libmemcached-dev \
|
||||
libpng-dev \
|
||||
liblz4-dev \
|
||||
libpq-dev \
|
||||
libxml2-dev \
|
||||
libmagickwand-dev \
|
||||
libzip-dev \
|
||||
libwebp-dev \
|
||||
libgmp-dev \
|
||||
libbz2-dev \
|
||||
git \
|
||||
curl \
|
||||
gnupg \
|
||||
dirmngr \
|
||||
; \
|
||||
rm -rf /var/lib/apt/lists/*
|
||||
|
||||
RUN set -eux; \
|
||||
debMultiarch="$(dpkg-architecture --query DEB_BUILD_MULTIARCH)"; \
|
||||
docker-php-ext-configure ftp --with-ftp-ssl; \
|
||||
docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp; \
|
||||
docker-php-ext-configure ldap --with-libdir="lib/$debMultiarch"; \
|
||||
docker-php-ext-install -j"$(nproc)" \
|
||||
bcmath \
|
||||
exif \
|
||||
ftp \
|
||||
gd \
|
||||
intl \
|
||||
ldap \
|
||||
opcache \
|
||||
pcntl \
|
||||
pdo_mysql \
|
||||
pdo_pgsql \
|
||||
sysvsem \
|
||||
zip \
|
||||
gmp \
|
||||
bz2
|
||||
|
||||
RUN set -eux; \
|
||||
pecl install APCu-5.1.28; \
|
||||
pecl install igbinary-3.2.16; \
|
||||
pecl install memcached-3.4.0; \
|
||||
pecl install redis-6.3.0; \
|
||||
pecl install imagick-3.8.1; \
|
||||
docker-php-ext-enable \
|
||||
apcu \
|
||||
igbinary \
|
||||
memcached \
|
||||
redis \
|
||||
imagick
|
||||
|
||||
############################
|
||||
# STAGE 2 ? RUNTIME
|
||||
############################
|
||||
FROM php:8.4-apache-trixie
|
||||
|
||||
ARG NC_VERS
|
||||
ENV NEXTCLOUD_VERSION=${NC_VERS}
|
||||
|
||||
# Runtime libraries ONLY (pas de -dev)
|
||||
RUN set -eux; \
|
||||
apt-get update; \
|
||||
apt-get install -y --no-install-recommends \
|
||||
rsync \
|
||||
bzip2 \
|
||||
busybox-static \
|
||||
ffmpeg \
|
||||
ghostscript \
|
||||
procps \
|
||||
fontconfig \
|
||||
exiftool \
|
||||
libldap-common \
|
||||
libmagickcore-7.q16-10-extra \
|
||||
libzip5 \
|
||||
libmemcached11 \
|
||||
libicu76 \
|
||||
libpq5 \
|
||||
libfreetype6 \
|
||||
libjpeg62-turbo \
|
||||
libpng16-16 \
|
||||
libwebp7 \
|
||||
libgmp10 \
|
||||
libbz2-1.0 \
|
||||
imagemagick \
|
||||
; \
|
||||
rm -rf /var/lib/apt/lists/*
|
||||
|
||||
RUN set -ex; \
|
||||
mkdir -p /var/spool/cron/crontabs; \
|
||||
echo '*/5 * * * * php -f /var/www/html/cron.php' > /var/spool/cron/crontabs/www-data
|
||||
|
||||
|
||||
# Copier extensions compilées
|
||||
COPY --from=build /usr/local/lib/php/extensions/ /usr/local/lib/php/extensions/
|
||||
COPY --from=build /usr/local/etc/php/conf.d/ /usr/local/etc/php/conf.d/
|
||||
|
||||
# Apache modules
|
||||
RUN a2enmod headers rewrite remoteip
|
||||
|
||||
# PHP tuning
|
||||
ENV PHP_MEMORY_LIMIT=2048M
|
||||
ENV PHP_UPLOAD_LIMIT=2048M
|
||||
ENV PHP_OPCACHE_MEMORY_CONSUMPTION 128
|
||||
|
||||
############################
|
||||
# INSTALL NEXTCLOUD
|
||||
############################
|
||||
RUN set -eux; \
|
||||
apt-get update; \
|
||||
apt-get install -y --no-install-recommends curl gnupg dirmngr; \
|
||||
curl -fsSL -o nextcloud.tar.bz2 \
|
||||
"https://download.nextcloud.com/server/releases/nextcloud-${NC_VERS}.tar.bz2"; \
|
||||
curl -fsSL -o nextcloud.tar.bz2.asc \
|
||||
"https://download.nextcloud.com/server/releases/nextcloud-${NC_VERS}.tar.bz2.asc"; \
|
||||
export GNUPGHOME="$(mktemp -d)"; \
|
||||
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 28806A878AE423A28372792ED75899B9A724937A; \
|
||||
gpg --batch --verify nextcloud.tar.bz2.asc nextcloud.tar.bz2; \
|
||||
tar -xjf nextcloud.tar.bz2 -C /usr/src/; \
|
||||
rm -rf "$GNUPGHOME" nextcloud.tar.bz2 nextcloud.tar.bz2.asc; \
|
||||
rm -rf /usr/src/nextcloud/updater; \
|
||||
mkdir /usr/src/nextcloud/data; \
|
||||
mkdir /usr/src/nextcloud/custom_apps; \
|
||||
chmod +x /usr/src/nextcloud/occ;
|
||||
|
||||
# set recommended PHP.ini settings
|
||||
# see https://docs.nextcloud.com/server/latest/admin_manual/installation/server_tuning.html#enable-php-opcache
|
||||
RUN { \
|
||||
echo 'opcache.enable=1'; \
|
||||
echo 'opcache.interned_strings_buffer=32'; \
|
||||
echo 'opcache.max_accelerated_files=10000'; \
|
||||
echo 'opcache.memory_consumption=${PHP_OPCACHE_MEMORY_CONSUMPTION}'; \
|
||||
echo 'opcache.save_comments=1'; \
|
||||
echo 'opcache.revalidate_freq=60'; \
|
||||
echo 'opcache.jit=1255'; \
|
||||
echo 'opcache.jit_buffer_size=128M'; \
|
||||
} > "${PHP_INI_DIR}/conf.d/opcache-recommended.ini"; \
|
||||
\
|
||||
echo 'apc.enable_cli=1' >> "${PHP_INI_DIR}/conf.d/docker-php-ext-apcu.ini"; \
|
||||
\
|
||||
{ \
|
||||
echo 'memory_limit=${PHP_MEMORY_LIMIT}'; \
|
||||
echo 'upload_max_filesize=${PHP_UPLOAD_LIMIT}'; \
|
||||
echo 'post_max_size=${PHP_UPLOAD_LIMIT}'; \
|
||||
} > "${PHP_INI_DIR}/conf.d/nextcloud.ini"; \
|
||||
\
|
||||
mkdir -p /docker-entrypoint-hooks.d/pre-installation \
|
||||
/docker-entrypoint-hooks.d/post-installation \
|
||||
/docker-entrypoint-hooks.d/pre-upgrade \
|
||||
/docker-entrypoint-hooks.d/post-upgrade \
|
||||
/docker-entrypoint-hooks.d/before-starting;\
|
||||
mkdir -p /var/www/data; \
|
||||
chown -R www-data /var/www;
|
||||
|
||||
RUN {\
|
||||
echo RemoteIPHeader X-Real-IP ;\
|
||||
echo RemoteIPTrustedProxy 10.0.0.0/8 ;\
|
||||
echo RemoteIPTrustedProxy 172.16.0.0/12 ;\
|
||||
echo RemoteIPTrustedProxy 192.168.0.0/16 ;\
|
||||
} > /etc/apache2/conf-available/remoteip.conf;\
|
||||
a2enconf remoteip
|
||||
|
||||
# set apache config LimitRequestBody
|
||||
ENV APACHE_BODY_LIMIT 1073741824
|
||||
RUN { \
|
||||
echo "LimitRequestBody ${APACHE_BODY_LIMIT}"; \
|
||||
} > /etc/apache2/conf-available/apache-limits.conf; \
|
||||
a2enconf apache-limits
|
||||
|
||||
COPY *.sh upgrade.exclude /
|
||||
RUN chmod +x /entrypoint.sh
|
||||
RUN chmod +x /cron.sh
|
||||
|
||||
COPY config/* /usr/src/nextcloud/config/
|
||||
ENV NEXTCLOUD_UPDATE=1
|
||||
ENV extra_params=--o:net.proto=IPv4
|
||||
|
||||
RUN sh -x && \
|
||||
for file in `convert -list policy | grep "Path:" | grep -v built | sed 's/Path: \(.*\)/\1/g'`; \
|
||||
do \
|
||||
sed -i 's/domain="coder" rights="none" pattern="PDF"/domain="coder" rights="read|write" pattern="PDF"/g' $file ;\
|
||||
done
|
||||
|
||||
VOLUME /var/www/html
|
||||
|
||||
ENTRYPOINT ["/entrypoint.sh"]
|
||||
|
||||
CMD ["apache2-foreground"]
|
||||
Référencer dans un nouveau ticket
Bloquer un utilisateur