hephaestos (sha256:5fa26d92083b894469d02d068763747b2986f7fedcb5c8869273972e08cdcd0b)

Published 2026-07-01 10:43:47 +02:00 by Yoann

Pull the image from the command line:

docker pull forge.yoannh.dev/yoannh/hephaestos@sha256:5fa26d92083b894469d02d068763747b2986f7fedcb5c8869273972e08cdcd0b

Digest

sha256:5fa26d92083b894469d02d068763747b2986f7fedcb5c8869273972e08cdcd0b

For more information on the Container registry, see the documentation.

# debian.sh --arch 'amd64' out/ 'trixie' '@1782172800'

SHELL [/bin/bash -euxo pipefail -c]

ENV APP_ENV=prod

ENV PHP_INI_SCAN_DIR=:/usr/local/etc/php/app.conf.d

RUN /bin/bash -euxo pipefail -c apt-get update apt-get install -y --no-install-recommends \ ca-certificates \ ghostscript \ imagemagick update-ca-certificates if [ -f /etc/ImageMagick-6/policy.xml ]; then sed -i 's/<policy domain="coder" rights="none" pattern="PDF" \/>/<policy domain="coder" rights="read|write" pattern="PDF" \/>/' /etc/ImageMagick-6/policy.xml fi rm -rf /var/lib/apt/lists/* # buildkit

COPY /usr/local/bin/frankenphp /usr/local/bin/frankenphp # buildkit

COPY /usr/local/bin/php /usr/local/bin/php # buildkit

COPY /usr/local/bin/docker-php-entrypoint /usr/local/bin/docker-php-entrypoint # buildkit

COPY /usr/local/lib/php/extensions /usr/local/lib/php/extensions # buildkit

COPY /tmp/libs /usr/lib # buildkit

COPY /usr/local/etc/php/conf.d /usr/local/etc/php/conf.d # buildkit

COPY /usr/local/etc/php/php.ini /usr/local/etc/php/php.ini # buildkit

COPY /usr/local/etc/php/app.conf.d /usr/local/etc/php/app.conf.d # buildkit

COPY /etc/frankenphp/Caddyfile /etc/frankenphp/Caddyfile # buildkit

COPY /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt # buildkit

COPY /etc/ssl/openssl.cnf /etc/ssl/openssl.cnf # buildkit

COPY /usr/bin/file /usr/bin/file # buildkit

COPY /usr/lib/file/magic.mgc /usr/lib/file/magic.mgc # buildkit

ENV OPENSSL_CONF=/etc/ssl/openssl.cnf XDG_CONFIG_HOME=/config XDG_DATA_HOME=/data SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt

COPY --chown=www-data:0 /app /app # buildkit

RUN /bin/bash -euxo pipefail -c mkdir -p /data/caddy /config/caddy chown -R www-data:www-data /data /config # Remove setuid/setgid bits find / -perm /6000 -type f -exec chmod a-s {} + 2>/dev/null || true # buildkit

COPY --chown=www-data:0 /app/var /app/var # buildkit

COPY var/manuscripts/templates/template-final.docx /app/var/manuscripts/templates/template-final.docx # buildkit

RUN /bin/bash -euxo pipefail -c chmod -R g=u /app/var # buildkit

COPY --chmod=755 frankenphp/docker-entrypoint.sh /usr/local/bin/docker-entrypoint # buildkit

USER www-data

WORKDIR /app

ENTRYPOINT ["docker-entrypoint"]

HEALTHCHECK &{["CMD-SHELL" "php -r 'exit(false === @file_get_contents(\"http://localhost:2019/metrics\", context: stream_context_create([\"http\" => [\"timeout\" => 5]])) ? 1 : 0);'"] "0s" "0s" "1m0s" "0s" '\x00'}

CMD ["frankenphp" "run" "--config" "/etc/frankenphp/Caddyfile"]