# Conflicts: # Dockerfile # app/config/errors.php # app/config/roles.php # app/config/specs/open-api3-latest-client.json # app/config/specs/open-api3-latest-console.json # app/config/specs/open-api3-latest-server.json # app/config/specs/swagger2-latest-client.json # app/config/specs/swagger2-latest-console.json # app/config/specs/swagger2-latest-server.json # app/controllers/api/graphql.php # app/controllers/shared/api.php # app/init.php # composer.lock # docker-compose.yml # src/Appwrite/Extend/Exception.php # src/Appwrite/Migration/Migration.php
379 lines
13 KiB
Docker
Executable file
379 lines
13 KiB
Docker
Executable file
FROM composer:2.0 as composer
|
|
|
|
ARG TESTING=false
|
|
ENV TESTING=$TESTING
|
|
|
|
WORKDIR /usr/local/src/
|
|
|
|
COPY composer.lock /usr/local/src/
|
|
COPY composer.json /usr/local/src/
|
|
|
|
RUN composer install --ignore-platform-reqs --optimize-autoloader \
|
|
--no-plugins --no-scripts --prefer-dist \
|
|
`if [ "$TESTING" != "true" ]; then echo "--no-dev"; fi`
|
|
|
|
FROM node:16.14.2-alpine3.15 as node
|
|
|
|
WORKDIR /usr/local/src/
|
|
|
|
COPY package-lock.json /usr/local/src/
|
|
COPY package.json /usr/local/src/
|
|
COPY gulpfile.js /usr/local/src/
|
|
COPY public /usr/local/src/public
|
|
|
|
RUN npm ci
|
|
RUN npm run build
|
|
|
|
FROM php:8.0.18-cli-alpine3.15 as compile
|
|
|
|
ARG DEBUG=false
|
|
ENV DEBUG=$DEBUG
|
|
|
|
ENV PHP_REDIS_VERSION=5.3.7 \
|
|
PHP_MONGODB_VERSION=1.13.0 \
|
|
PHP_SWOOLE_VERSION=v4.8.10 \
|
|
PHP_IMAGICK_VERSION=3.7.0 \
|
|
PHP_YAML_VERSION=2.2.2 \
|
|
PHP_MAXMINDDB_VERSION=v1.11.0 \
|
|
PHP_ZSTD_VERSION="4504e4186e79b197cfcb75d4d09aa47ef7d92fe9 "
|
|
|
|
RUN \
|
|
apk add --no-cache --virtual .deps \
|
|
make \
|
|
automake \
|
|
autoconf \
|
|
gcc \
|
|
g++ \
|
|
git \
|
|
zlib-dev \
|
|
brotli-dev \
|
|
openssl-dev \
|
|
yaml-dev \
|
|
imagemagick \
|
|
imagemagick-dev \
|
|
libmaxminddb-dev \
|
|
zstd-dev
|
|
|
|
RUN docker-php-ext-install sockets
|
|
|
|
FROM compile AS redis
|
|
RUN \
|
|
# Redis Extension
|
|
git clone --depth 1 --branch $PHP_REDIS_VERSION https://github.com/phpredis/phpredis.git && \
|
|
cd phpredis && \
|
|
phpize && \
|
|
./configure && \
|
|
make && make install
|
|
|
|
## Swoole Extension
|
|
FROM compile AS swoole
|
|
RUN \
|
|
git clone --depth 1 --branch $PHP_SWOOLE_VERSION https://github.com/swoole/swoole-src.git && \
|
|
cd swoole-src && \
|
|
phpize && \
|
|
./configure --enable-sockets --enable-http2 --enable-openssl && \
|
|
make && make install && \
|
|
cd ..
|
|
|
|
## Swoole Debugger setup
|
|
RUN if [ "$DEBUG" == "true" ]; then \
|
|
cd /tmp && \
|
|
apk add boost-dev && \
|
|
git clone --depth 1 https://github.com/swoole/yasd && \
|
|
cd yasd && \
|
|
phpize && \
|
|
./configure && \
|
|
make && make install && \
|
|
cd ..;\
|
|
fi
|
|
|
|
## Imagick Extension
|
|
FROM compile AS imagick
|
|
RUN \
|
|
git clone --depth 1 --branch $PHP_IMAGICK_VERSION https://github.com/imagick/imagick && \
|
|
cd imagick && \
|
|
phpize && \
|
|
./configure && \
|
|
make && make install
|
|
|
|
## YAML Extension
|
|
FROM compile AS yaml
|
|
RUN \
|
|
git clone --depth 1 --branch $PHP_YAML_VERSION https://github.com/php/pecl-file_formats-yaml && \
|
|
cd pecl-file_formats-yaml && \
|
|
phpize && \
|
|
./configure && \
|
|
make && make install
|
|
|
|
## Maxminddb extension
|
|
FROM compile AS maxmind
|
|
RUN \
|
|
git clone --depth 1 --branch $PHP_MAXMINDDB_VERSION https://github.com/maxmind/MaxMind-DB-Reader-php.git && \
|
|
cd MaxMind-DB-Reader-php && \
|
|
cd ext && \
|
|
phpize && \
|
|
./configure && \
|
|
make && make install
|
|
|
|
# Mongodb Extension
|
|
FROM compile as mongodb
|
|
RUN \
|
|
git clone --depth 1 --branch $PHP_MONGODB_VERSION https://github.com/mongodb/mongo-php-driver.git && \
|
|
cd mongo-php-driver && \
|
|
git submodule update --init && \
|
|
phpize && \
|
|
./configure && \
|
|
make && make install
|
|
|
|
# Zstd Compression
|
|
FROM compile as zstd
|
|
RUN git clone --recursive -n https://github.com/kjdev/php-ext-zstd.git \
|
|
&& cd php-ext-zstd \
|
|
&& git checkout $PHP_ZSTD_VERSION \
|
|
&& phpize \
|
|
&& ./configure --with-libzstd \
|
|
&& make && make install
|
|
|
|
|
|
# Rust Extensions Compile Image
|
|
FROM php:8.0.18-cli as rust_compile
|
|
|
|
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
|
|
|
|
ENV PATH=/root/.cargo/bin:$PATH
|
|
|
|
RUN apt-get update && apt-get install musl-tools build-essential clang-11 git -y
|
|
RUN rustup target add $(uname -m)-unknown-linux-musl
|
|
|
|
# Install ZigBuild for easier cross-compilation
|
|
RUN curl https://ziglang.org/builds/zig-linux-$(uname -m)-0.10.0-dev.2674+d980c6a38.tar.xz --output /tmp/zig.tar.xz
|
|
RUN tar -xf /tmp/zig.tar.xz -C /tmp/ && cp -r /tmp/zig-linux-$(uname -m)-0.10.0-dev.2674+d980c6a38 /tmp/zig/
|
|
ENV PATH=/tmp/zig:$PATH
|
|
RUN cargo install cargo-zigbuild
|
|
ENV RUSTFLAGS="-C target-feature=-crt-static"
|
|
|
|
FROM rust_compile as scrypt
|
|
|
|
WORKDIR /usr/local/lib/php/extensions/
|
|
|
|
RUN \
|
|
git clone --depth 1 https://github.com/appwrite/php-scrypt.git && \
|
|
cd php-scrypt && \
|
|
cargo zigbuild --workspace --all-targets --target $(uname -m)-unknown-linux-musl --release && \
|
|
mv target/$(uname -m)-unknown-linux-musl/release/libphp_scrypt.so target/libphp_scrypt.so
|
|
|
|
FROM php:8.0.18-cli-alpine3.15 as final
|
|
|
|
LABEL maintainer="team@appwrite.io"
|
|
|
|
ARG VERSION=dev
|
|
ARG DEBUG=false
|
|
ENV DEBUG=$DEBUG
|
|
|
|
ENV DOCKER_CONFIG=${DOCKER_CONFIG:-$HOME/.docker}
|
|
ENV DOCKER_COMPOSE_VERSION=v2.5.0
|
|
|
|
ENV _APP_SERVER=swoole \
|
|
_APP_ENV=production \
|
|
_APP_LOCALE=en \
|
|
_APP_WORKER_PER_CORE= \
|
|
_APP_DOMAIN=localhost \
|
|
_APP_DOMAIN_TARGET=localhost \
|
|
_APP_HOME=https://appwrite.io \
|
|
_APP_EDITION=community \
|
|
_APP_CONSOLE_WHITELIST_ROOT=enabled \
|
|
_APP_CONSOLE_WHITELIST_EMAILS= \
|
|
_APP_CONSOLE_WHITELIST_IPS= \
|
|
_APP_SYSTEM_EMAIL_NAME= \
|
|
_APP_SYSTEM_EMAIL_ADDRESS= \
|
|
_APP_SYSTEM_RESPONSE_FORMAT= \
|
|
_APP_SYSTEM_SECURITY_EMAIL_ADDRESS= \
|
|
_APP_OPTIONS_ABUSE=enabled \
|
|
_APP_OPTIONS_FORCE_HTTPS=disabled \
|
|
_APP_OPENSSL_KEY_V1=your-secret-key \
|
|
_APP_STORAGE_LIMIT=10000000 \
|
|
_APP_STORAGE_ANTIVIRUS=enabled \
|
|
_APP_STORAGE_ANTIVIRUS_HOST=clamav \
|
|
_APP_STORAGE_ANTIVIRUS_PORT=3310 \
|
|
_APP_STORAGE_DEVICE=Local \
|
|
_APP_STORAGE_S3_ACCESS_KEY= \
|
|
_APP_STORAGE_S3_SECRET= \
|
|
_APP_STORAGE_S3_REGION= \
|
|
_APP_STORAGE_S3_BUCKET= \
|
|
_APP_STORAGE_DO_SPACES_ACCESS_KEY= \
|
|
_APP_STORAGE_DO_SPACES_SECRET= \
|
|
_APP_STORAGE_DO_SPACES_REGION= \
|
|
_APP_STORAGE_DO_SPACES_BUCKET= \
|
|
_APP_STORAGE_BACKBLAZE_ACCESS_KEY= \
|
|
_APP_STORAGE_BACKBLAZE_SECRET= \
|
|
_APP_STORAGE_BACKBLAZE_REGION= \
|
|
_APP_STORAGE_BACKBLAZE_BUCKET= \
|
|
_APP_STORAGE_LINODE_ACCESS_KEY= \
|
|
_APP_STORAGE_LINODE_SECRET= \
|
|
_APP_STORAGE_LINODE_REGION= \
|
|
_APP_STORAGE_LINODE_BUCKET= \
|
|
_APP_STORAGE_WASABI_ACCESS_KEY= \
|
|
_APP_STORAGE_WASABI_SECRET= \
|
|
_APP_STORAGE_WASABI_REGION= \
|
|
_APP_STORAGE_WASABI_BUCKET= \
|
|
_APP_REDIS_HOST=redis \
|
|
_APP_REDIS_PORT=6379 \
|
|
_APP_DB_HOST=mariadb \
|
|
_APP_DB_PORT=3306 \
|
|
_APP_DB_USER=root \
|
|
_APP_DB_PASS=password \
|
|
_APP_DB_SCHEMA=appwrite \
|
|
_APP_INFLUXDB_HOST=influxdb \
|
|
_APP_INFLUXDB_PORT=8086 \
|
|
_APP_STATSD_HOST=telegraf \
|
|
_APP_STATSD_PORT=8125 \
|
|
_APP_SMTP_HOST= \
|
|
_APP_SMTP_PORT= \
|
|
_APP_SMTP_SECURE= \
|
|
_APP_SMTP_USERNAME= \
|
|
_APP_SMTP_PASSWORD= \
|
|
_APP_SMS_PROVIDER= \
|
|
_APP_SMS_FROM= \
|
|
_APP_FUNCTIONS_SIZE_LIMIT=30000000 \
|
|
_APP_FUNCTIONS_TIMEOUT=900 \
|
|
_APP_FUNCTIONS_CONTAINERS=10 \
|
|
_APP_FUNCTIONS_CPUS=1 \
|
|
_APP_FUNCTIONS_MEMORY=128 \
|
|
_APP_FUNCTIONS_MEMORY_SWAP=128 \
|
|
_APP_EXECUTOR_SECRET=a-random-secret \
|
|
_APP_EXECUTOR_HOST=http://appwrite-executor/v1 \
|
|
_APP_EXECUTOR_RUNTIME_NETWORK=appwrite_runtimes \
|
|
_APP_SETUP=self-hosted \
|
|
_APP_VERSION=$VERSION \
|
|
_APP_USAGE_STATS=enabled \
|
|
_APP_USAGE_TIMESERIES_INTERVAL=30 \
|
|
_APP_USAGE_DATABASE_INTERVAL=900 \
|
|
# 14 Days = 1209600 s
|
|
_APP_MAINTENANCE_RETENTION_EXECUTION=1209600 \
|
|
_APP_MAINTENANCE_RETENTION_AUDIT=1209600 \
|
|
# 1 Day = 86400 s
|
|
_APP_MAINTENANCE_RETENTION_ABUSE=86400 \
|
|
_APP_MAINTENANCE_INTERVAL=86400 \
|
|
_APP_LOGGING_PROVIDER= \
|
|
_APP_LOGGING_CONFIG=
|
|
|
|
RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
|
|
|
|
RUN \
|
|
apk update \
|
|
&& apk add --no-cache --virtual .deps \
|
|
make \
|
|
automake \
|
|
autoconf \
|
|
gcc \
|
|
g++ \
|
|
curl-dev \
|
|
&& apk add --no-cache \
|
|
libstdc++ \
|
|
certbot \
|
|
brotli-dev \
|
|
yaml-dev \
|
|
imagemagick \
|
|
imagemagick-dev \
|
|
libmaxminddb-dev \
|
|
certbot \
|
|
docker-cli \
|
|
libgomp \
|
|
&& docker-php-ext-install sockets opcache pdo_mysql \
|
|
&& apk del .deps \
|
|
&& rm -rf /var/cache/apk/*
|
|
|
|
RUN \
|
|
mkdir -p $DOCKER_CONFIG/cli-plugins \
|
|
&& ARCH=$(uname -m) && if [ $ARCH == "armv7l" ]; then ARCH="armv7"; fi \
|
|
&& curl -SL https://github.com/docker/compose/releases/download/$DOCKER_COMPOSE_VERSION/docker-compose-linux-$ARCH -o $DOCKER_CONFIG/cli-plugins/docker-compose \
|
|
&& chmod +x $DOCKER_CONFIG/cli-plugins/docker-compose
|
|
|
|
RUN \
|
|
if [ "$DEBUG" == "true" ]; then \
|
|
apk add boost boost-dev; \
|
|
fi
|
|
|
|
WORKDIR /usr/src/code
|
|
|
|
COPY --from=composer /usr/local/src/vendor /usr/src/code/vendor
|
|
COPY --from=node /usr/local/src/public/dist /usr/src/code/public/dist
|
|
COPY --from=swoole /usr/local/lib/php/extensions/no-debug-non-zts-20200930/swoole.so /usr/local/lib/php/extensions/no-debug-non-zts-20200930/yasd.so* /usr/local/lib/php/extensions/no-debug-non-zts-20200930/
|
|
COPY --from=redis /usr/local/lib/php/extensions/no-debug-non-zts-20200930/redis.so /usr/local/lib/php/extensions/no-debug-non-zts-20200930/
|
|
COPY --from=imagick /usr/local/lib/php/extensions/no-debug-non-zts-20200930/imagick.so /usr/local/lib/php/extensions/no-debug-non-zts-20200930/
|
|
COPY --from=yaml /usr/local/lib/php/extensions/no-debug-non-zts-20200930/yaml.so /usr/local/lib/php/extensions/no-debug-non-zts-20200930/
|
|
COPY --from=maxmind /usr/local/lib/php/extensions/no-debug-non-zts-20200930/maxminddb.so /usr/local/lib/php/extensions/no-debug-non-zts-20200930/
|
|
COPY --from=mongodb /usr/local/lib/php/extensions/no-debug-non-zts-20200930/mongodb.so /usr/local/lib/php/extensions/no-debug-non-zts-20200930/
|
|
COPY --from=scrypt /usr/local/lib/php/extensions/php-scrypt/target/libphp_scrypt.so /usr/local/lib/php/extensions/no-debug-non-zts-20200930/
|
|
COPY --from=zstd /usr/local/lib/php/extensions/no-debug-non-zts-20200930/zstd.so /usr/local/lib/php/extensions/no-debug-non-zts-20200930/
|
|
|
|
# Add Source Code
|
|
COPY ./app /usr/src/code/app
|
|
COPY ./bin /usr/local/bin
|
|
COPY ./docs /usr/src/code/docs
|
|
COPY ./public/fonts /usr/src/code/public/fonts
|
|
COPY ./public/images /usr/src/code/public/images
|
|
COPY ./src /usr/src/code/src
|
|
|
|
# Set Volumes
|
|
RUN mkdir -p /storage/uploads && \
|
|
mkdir -p /storage/cache && \
|
|
mkdir -p /storage/config && \
|
|
mkdir -p /storage/certificates && \
|
|
mkdir -p /storage/functions && \
|
|
mkdir -p /storage/debug && \
|
|
chown -Rf www-data.www-data /storage/uploads && chmod -Rf 0755 /storage/uploads && \
|
|
chown -Rf www-data.www-data /storage/cache && chmod -Rf 0755 /storage/cache && \
|
|
chown -Rf www-data.www-data /storage/config && chmod -Rf 0755 /storage/config && \
|
|
chown -Rf www-data.www-data /storage/certificates && chmod -Rf 0755 /storage/certificates && \
|
|
chown -Rf www-data.www-data /storage/functions && chmod -Rf 0755 /storage/functions && \
|
|
chown -Rf www-data.www-data /storage/debug && chmod -Rf 0755 /storage/debug
|
|
|
|
# Executables
|
|
RUN chmod +x /usr/local/bin/doctor && \
|
|
chmod +x /usr/local/bin/maintenance && \
|
|
chmod +x /usr/local/bin/usage && \
|
|
chmod +x /usr/local/bin/install && \
|
|
chmod +x /usr/local/bin/migrate && \
|
|
chmod +x /usr/local/bin/realtime && \
|
|
chmod +x /usr/local/bin/executor && \
|
|
chmod +x /usr/local/bin/schedule && \
|
|
chmod +x /usr/local/bin/sdks && \
|
|
chmod +x /usr/local/bin/specs && \
|
|
chmod +x /usr/local/bin/ssl && \
|
|
chmod +x /usr/local/bin/test && \
|
|
chmod +x /usr/local/bin/vars && \
|
|
chmod +x /usr/local/bin/worker-audits && \
|
|
chmod +x /usr/local/bin/worker-certificates && \
|
|
chmod +x /usr/local/bin/worker-databases && \
|
|
chmod +x /usr/local/bin/worker-deletes && \
|
|
chmod +x /usr/local/bin/worker-functions && \
|
|
chmod +x /usr/local/bin/worker-builds && \
|
|
chmod +x /usr/local/bin/worker-mails && \
|
|
chmod +x /usr/local/bin/worker-messaging && \
|
|
chmod +x /usr/local/bin/worker-webhooks
|
|
|
|
# Letsencrypt Permissions
|
|
RUN mkdir -p /etc/letsencrypt/live/ && chmod -Rf 755 /etc/letsencrypt/live/
|
|
|
|
# Enable Extensions
|
|
RUN echo extension=swoole.so >> /usr/local/etc/php/conf.d/swoole.ini
|
|
RUN echo extension=redis.so >> /usr/local/etc/php/conf.d/redis.ini
|
|
RUN echo extension=imagick.so >> /usr/local/etc/php/conf.d/imagick.ini
|
|
RUN echo extension=yaml.so >> /usr/local/etc/php/conf.d/yaml.ini
|
|
RUN echo extension=maxminddb.so >> /usr/local/etc/php/conf.d/maxminddb.ini
|
|
RUN echo extension=libphp_scrypt.so >> /usr/local/etc/php/conf.d/libphp_scrypt.ini
|
|
RUN echo extension=zstd.so >> /usr/local/etc/php/conf.d/zstd.ini
|
|
RUN if [ "$DEBUG" == "true" ]; then printf "zend_extension=yasd \nyasd.debug_mode=remote \nyasd.remote_host=host.docker.internal \nyasd.remote_port=9005 \nyasd.log_level=0" >> /usr/local/etc/php/conf.d/yasd.ini; fi
|
|
|
|
RUN if [ "$DEBUG" == "true" ]; then echo "opcache.enable=0" >> /usr/local/etc/php/conf.d/appwrite.ini; fi
|
|
RUN echo "opcache.preload_user=www-data" >> /usr/local/etc/php/conf.d/appwrite.ini
|
|
RUN echo "opcache.preload=/usr/src/code/app/preload.php" >> /usr/local/etc/php/conf.d/appwrite.ini
|
|
RUN echo "opcache.enable_cli=1" >> /usr/local/etc/php/conf.d/appwrite.ini
|
|
RUN echo "default_socket_timeout=-1" >> /usr/local/etc/php/conf.d/appwrite.ini
|
|
RUN echo "opcache.jit_buffer_size=100M" >> /usr/local/etc/php/conf.d/appwrite.ini
|
|
RUN echo "opcache.jit=1235" >> /usr/local/etc/php/conf.d/appwrite.ini
|
|
|
|
EXPOSE 80
|
|
|
|
CMD [ "php", "app/http.php", "-dopcache.preload=opcache.preload=/usr/src/code/app/preload.php" ]
|