hephaestos (sha256:09dedf9b879ab63b2463294a696e98f45532be0bcd1e0926ef2925ab70bb1913)

Published 2026-09-16 16:12:51 +02:00 by Yoann

Pull the image from the command line:

docker pull forge.yoannh.dev/yoannh/hephaestos@sha256:09dedf9b879ab63b2463294a696e98f45532be0bcd1e0926ef2925ab70bb1913

Digest

sha256:09dedf9b879ab63b2463294a696e98f45532be0bcd1e0926ef2925ab70bb1913

For more information on the Container registry, see the documentation.

# debian.sh --arch 'amd64' out/ 'trixie' '@1787529600'

SHELL [/bin/bash -euxo pipefail -c]

ENV APP_ENV=prod

ENV PHP_INI_SCAN_DIR=:/usr/local/etc/php/app.conf.d

RUN /bin/bash -euxo pipefail -c apt-get update apt-get install -y --no-install-recommends \ ca-certificates \ ghostscript \ imagemagick update-ca-certificates if [ -f /etc/ImageMagick-6/policy.xml ]; then sed -i 's/<policy domain="coder" rights="none" pattern="PDF" \/>/<policy domain="coder" rights="read|write" pattern="PDF" \/>/' /etc/ImageMagick-6/policy.xml fi rm -rf /var/lib/apt/lists/* # buildkit

COPY /usr/local/bin/frankenphp /usr/local/bin/frankenphp # buildkit

COPY /usr/local/bin/php /usr/local/bin/php # buildkit

COPY /usr/local/bin/docker-php-entrypoint /usr/local/bin/docker-php-entrypoint # buildkit

COPY /usr/local/lib/php/extensions /usr/local/lib/php/extensions # buildkit

COPY /tmp/libs /usr/lib # buildkit

COPY /usr/local/etc/php/conf.d /usr/local/etc/php/conf.d # buildkit

COPY /usr/local/etc/php/php.ini /usr/local/etc/php/php.ini # buildkit

COPY /usr/local/etc/php/app.conf.d /usr/local/etc/php/app.conf.d # buildkit

COPY /etc/frankenphp/Caddyfile /etc/frankenphp/Caddyfile # buildkit

COPY /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt # buildkit

COPY /etc/ssl/openssl.cnf /etc/ssl/openssl.cnf # buildkit

COPY /usr/bin/file /usr/bin/file # buildkit

COPY /usr/lib/file/magic.mgc /usr/lib/file/magic.mgc # buildkit

ENV OPENSSL_CONF=/etc/ssl/openssl.cnf XDG_CONFIG_HOME=/config XDG_DATA_HOME=/data SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt

COPY --chown=www-data:0 /app /app # buildkit

RUN /bin/bash -euxo pipefail -c mkdir -p /data/caddy /config/caddy chown -R www-data:www-data /data /config # Remove setuid/setgid bits find / -perm /6000 -type f -exec chmod a-s {} + 2>/dev/null || true # buildkit

COPY --chown=www-data:0 /app/var /app/var # buildkit

COPY resources/docx-templates/default.docx /app/resources/docx-templates/default.docx # buildkit

RUN /bin/bash -euxo pipefail -c chmod -R g=u /app/var # buildkit

COPY --chmod=755 frankenphp/docker-entrypoint.sh /usr/local/bin/docker-entrypoint # buildkit

USER www-data

WORKDIR /app

ENTRYPOINT ["docker-entrypoint"]

HEALTHCHECK {Test:[CMD-SHELL php -r 'exit(false === @file_get_contents("http://localhost:2019/metrics", context: stream_context_create(["http" => ["timeout" => 5]])) ? 1 : 0);'] Interval:0s Timeout:0s StartPeriod:1m0s StartInterval:0s Retries:0}

CMD ["frankenphp" "run" "--config" "/etc/frankenphp/Caddyfile"]