209 lignes
6.1 KiB
Docker
209 lignes
6.1 KiB
Docker
ARG NC_VERS
|
|
|
|
FROM php:8.4-apache-trixie
|
|
ARG NC_VERS
|
|
ENV NEXTCLOUD_VERSION ${NC_VERS}
|
|
|
|
|
|
# entrypoint.sh and cron.sh dependencies
|
|
RUN set -ex; \
|
|
\
|
|
apt-get update; \
|
|
apt-get install -y --no-install-recommends \
|
|
rsync \
|
|
bzip2 \
|
|
busybox-static \
|
|
libldap-common \
|
|
libmagickcore-6.q16-6-extra \
|
|
libzip4 \
|
|
libmemcached11 \
|
|
; \
|
|
|
|
rm -rf /var/lib/apt/lists/*; \
|
|
\
|
|
mkdir -p /var/spool/cron/crontabs; \
|
|
echo '*/5 * * * * php -f /var/www/html/cron.php' > /var/spool/cron/crontabs/www-data
|
|
|
|
# install the PHP extensions we need
|
|
# see https://docs.nextcloud.com/server/stable/admin_manual/installation/source_installation.html
|
|
ENV PHP_MEMORY_LIMIT 512M
|
|
ENV PHP_UPLOAD_LIMIT 512M
|
|
RUN set -ex; \
|
|
\
|
|
savedAptMark="$(apt-mark showmanual)"; \
|
|
\
|
|
apt-get update; \
|
|
apt-get install -y --no-install-recommends \
|
|
libcurl4-openssl-dev \
|
|
libevent-dev \
|
|
libfreetype6-dev \
|
|
libicu-dev \
|
|
libjpeg-dev \
|
|
libldap2-dev \
|
|
libmemcached-dev \
|
|
libpng-dev \
|
|
libpq-dev \
|
|
libxml2-dev \
|
|
libmagickwand-dev \
|
|
libzip-dev \
|
|
libwebp-dev \
|
|
libgmp-dev \
|
|
imagemagick \
|
|
libbz2-dev \
|
|
; \
|
|
\
|
|
debMultiarch="$(dpkg-architecture --query DEB_BUILD_MULTIARCH)"; \
|
|
docker-php-ext-configure ftp --with-ftp-ssl; \
|
|
docker-php-ext-configure ftp --with-openssl-dir=/usr; \
|
|
docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp; \
|
|
docker-php-ext-configure ldap --with-libdir="lib/$debMultiarch"; \
|
|
docker-php-ext-install -j "$(nproc)" \
|
|
bcmath \
|
|
exif \
|
|
ftp \
|
|
gd \
|
|
intl \
|
|
ldap \
|
|
opcache \
|
|
pcntl \
|
|
pdo_mysql \
|
|
pdo_pgsql \
|
|
sysvsem \
|
|
zip \
|
|
gmp \
|
|
bz2 \
|
|
; \
|
|
\
|
|
# pecl will claim success even if one install fails, so we need to perform each install separately
|
|
pecl install APCu-5.1.27; \
|
|
pecl install memcached-3.4.0; \
|
|
pecl install redis-6.0.2; \
|
|
pecl install imagick-3.7.0; \
|
|
\
|
|
docker-php-ext-enable \
|
|
apcu \
|
|
memcached \
|
|
imagick \
|
|
redis \
|
|
bz2 \
|
|
; \
|
|
rm -r /tmp/pear; \
|
|
apt-mark auto '.*' > /dev/null; \
|
|
apt-mark manual $savedAptMark; \
|
|
ldd "$(php -r 'echo ini_get("extension_dir");')"/*.so \
|
|
| awk '/=>/ { print $3 }' \
|
|
| sort -u \
|
|
| xargs -rt dpkg-query --search \
|
|
# https://manpages.debian.org/trixie/dpkg/dpkg-query.1.en.html#S (we ignore diversions and it'll be really unusual for more than one package to provide any given .so file)
|
|
| awk 'sub(":$", "", $1) { print $1 }' \
|
|
| sort -u \
|
|
| xargs -rt apt-mark manual;
|
|
|
|
|
|
|
|
# set recommended PHP.ini settings
|
|
# see https://docs.nextcloud.com/server/latest/admin_manual/installation/server_tuning.html#enable-php-opcache
|
|
RUN { \
|
|
echo 'opcache.enable=1'; \
|
|
echo 'opcache.interned_strings_buffer=32'; \
|
|
echo 'opcache.max_accelerated_files=10000'; \
|
|
echo 'opcache.memory_consumption=256'; \
|
|
echo 'opcache.save_comments=1'; \
|
|
echo 'opcache.revalidate_freq=60'; \
|
|
echo 'opcache.jit=1255'; \
|
|
echo 'opcache.jit_buffer_size=128M'; \
|
|
} > "${PHP_INI_DIR}/conf.d/opcache-recommended.ini"; \
|
|
\
|
|
echo 'apc.enable_cli=1' >> "${PHP_INI_DIR}/conf.d/docker-php-ext-apcu.ini"; \
|
|
\
|
|
{ \
|
|
echo 'memory_limit=${PHP_MEMORY_LIMIT}'; \
|
|
echo 'upload_max_filesize=${PHP_UPLOAD_LIMIT}'; \
|
|
echo 'post_max_size=${PHP_UPLOAD_LIMIT}'; \
|
|
} > "${PHP_INI_DIR}/conf.d/nextcloud.ini"; \
|
|
\
|
|
mkdir /var/www/data; \
|
|
chown -R www-data:root /var/www; \
|
|
chmod -R g=u /var/www
|
|
|
|
VOLUME /var/www/html
|
|
|
|
RUN a2enmod headers rewrite remoteip ;\
|
|
{\
|
|
echo RemoteIPHeader X-Real-IP ;\
|
|
echo RemoteIPTrustedProxy 10.0.0.0/8 ;\
|
|
echo RemoteIPTrustedProxy 172.16.0.0/12 ;\
|
|
echo RemoteIPTrustedProxy 192.168.0.0/16 ;\
|
|
} > /etc/apache2/conf-available/remoteip.conf;\
|
|
a2enconf remoteip
|
|
|
|
# set apache config LimitRequestBody
|
|
ENV APACHE_BODY_LIMIT 1073741824
|
|
RUN { \
|
|
echo "LimitRequestBody ${APACHE_BODY_LIMIT}"; \
|
|
} > /etc/apache2/conf-available/apache-limits.conf; \
|
|
a2enconf apache-limits
|
|
|
|
RUN set -ex; \
|
|
apt-get update; \
|
|
apt-get install -y --no-install-recommends \
|
|
ffmpeg \
|
|
libmagickcore-6.q16-6-extra \
|
|
ghostscript \
|
|
procps \
|
|
vim \
|
|
fontconfig \
|
|
exiftool \
|
|
gnupg; \
|
|
docker-php-ext-enable imagick
|
|
|
|
RUN set -ex; \
|
|
fetchDeps=" \
|
|
gnupg \
|
|
dirmngr \
|
|
"; \
|
|
apt-get update; \
|
|
apt-get install -y --no-install-recommends $fetchDeps; \
|
|
\
|
|
curl -fsSL -o nextcloud.tar.bz2 \
|
|
"https://download.nextcloud.com/server/releases/nextcloud-${NC_VERS}.tar.bz2"; \
|
|
curl -fsSL -o nextcloud.tar.bz2.asc \
|
|
"https://download.nextcloud.com/server/releases/nextcloud-${NC_VERS}.tar.bz2.asc"; \
|
|
export GNUPGHOME="$(mktemp -d)"; \
|
|
# gpg key from https://nextcloud.com/nextcloud.asc \
|
|
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 28806A878AE423A28372792ED75899B9A724937A; \
|
|
gpg --batch --verify nextcloud.tar.bz2.asc nextcloud.tar.bz2; \
|
|
tar -xjf nextcloud.tar.bz2 -C /usr/src/; \
|
|
gpgconf --kill all; \
|
|
rm nextcloud.tar.bz2.asc nextcloud.tar.bz2; \
|
|
rm -rf "$GNUPGHOME" /usr/src/nextcloud/updater; \
|
|
mkdir -p /usr/src/nextcloud/data; \
|
|
mkdir -p /usr/src/nextcloud/custom_apps; \
|
|
chmod +x /usr/src/nextcloud/occ;
|
|
|
|
COPY *.sh upgrade.exclude /
|
|
RUN chmod +x /entrypoint.sh
|
|
RUN chmod +x /cron.sh
|
|
|
|
COPY config/* /usr/src/nextcloud/config/
|
|
|
|
ENV NEXTCLOUD_UPDATE=1
|
|
ENV PHP_MEMORY_LIMIT=2048M
|
|
ENV PHP_UPLOAD_LIMIT=2048M
|
|
ENV extra_params=--o:net.proto=IPv4
|
|
ENV NEXTCLOUD_VERSION ${NC_VERS}
|
|
|
|
RUN sh -x && \
|
|
for file in `convert -list policy | grep "Path:" | grep -v built | sed 's/Path: \(.*\)/\1/g'`; \
|
|
do \
|
|
sed -i 's/domain="coder" rights="none" pattern="PDF"/domain="coder" rights="read|write" pattern="PDF"/g' $file ;\
|
|
done
|
|
|
|
RUN set -ex; \
|
|
apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
ENTRYPOINT ["/entrypoint.sh"]
|
|
CMD ["apache2-foreground"]
|
|
|