Feature - Docker overhaul

.devcontainer/.bashrc

@@ -0,0 +1,7 @@
+# Get current Git branch
+parse_git_branch() {
+    git branch 2> /dev/null | sed -e '/^[^*]/d' -e 's/* \(.*\)/ (\1)/'
+}
+
+# Custom PS1 prompt: green user@host, blue directory, yellow git branch
+export PS1='\[\e[32m\]\u@\h\[\e[m\]:\[\e[34m\]\w\[\e[33m\]$(parse_git_branch)\[\e[m\]\$ '

.devcontainer/devcontainer.json

@@ -2,18 +2,19 @@
 {
     "name": "Laravel PrimeVue Starter",
     "dockerComposeFile": [
-        "../docker-compose.local.yml"
+        "../docker-compose.dev.yml"
     ],
     "service": "laravel",
     "workspaceFolder": "/var/www/html",
     "mounts": [
-        "type=bind,source=/home/${localEnv:USER}/.ssh,target=/home/sail/.ssh,readonly"
+        "type=bind,source=/home/${localEnv:USER}/.ssh,target=/home/www-data/.ssh,readonly"
     ],
     "customizations": {
         "vscode": {
             "extensions": [
                 "DEVSENSE.phptools-vscode",
                 "MehediDracula.php-namespace-resolver",
+                "xdebug.php-debug",
                 "laravel.vscode-laravel",
                 "Vue.volar",
                 "hollowtree.vue-snippets",
@@ -37,7 +38,7 @@
             }
         }
     },
-    "remoteUser": "sail",
+    "remoteUser": "www-data",
     "postCreateCommand": "chown -R 1000:1000 /var/www/html 2>/dev/null || true"
     // "forwardPorts": [],
     // "runServices": [],

.devcontainer/xdebug.ini

@@ -0,0 +1,6 @@
+[xdebug]
+zend_extension=xdebug.so
+xdebug.start_with_request=yes
+xdebug.client_host=host.docker.internal
+xdebug.client_port=9003
+xdebug.log=/tmp/xdebug.log

.dockerignore

@@ -0,0 +1,6 @@
+.git
+tests
+.env*
+Dockerfile*
+docker-*.yml
+*.md

.env.example

@@ -3,7 +3,8 @@ APP_ENV=local
 APP_KEY=
 APP_DEBUG=true
 APP_TIMEZONE=UTC
-APP_URL=http://localhost:8000
+APP_DOMAIN=localhost:8000
+APP_URL="http://${APP_DOMAIN}"
 
 APP_LOCALE=en
 APP_FALLBACK_LOCALE=en
@@ -22,11 +23,12 @@ LOG_LEVEL=debug
 DB_CONNECTION=sqlite
 #DB_HOST=
 #DB_PORT=
+#DB_FORWARD_PORT=
 #DB_DATABASE=
 #DB_USERNAME=
 #DB_PASSWORD=
 
-SESSION_DRIVER=file
+SESSION_DRIVER=database
 SESSION_LIFETIME=120
 SESSION_ENCRYPT=false
 SESSION_PATH=/
@@ -62,10 +64,8 @@ AWS_BUCKET=
 AWS_USE_PATH_STYLE_ENDPOINT=false
 
 VITE_APP_NAME="${APP_NAME}"
-
-WWWGROUP=1000
-WWWUSER=1000
-
-APP_PORT=8000
 VITE_APP_PORT=5173
-FORWARD_DB_PORT=
+
+#USER_ID=1000
+#GROUP_ID=1000
+#XDEBUG_MODE=debug

.infrastructure/s6-overlay/inertia-ssr/dependencies

@@ -0,0 +1 @@
+php-fpm

.infrastructure/s6-overlay/inertia-ssr/run

@@ -0,0 +1,2 @@
+#!/bin/sh
+exec php /var/www/html/artisan inertia:start-ssr

.infrastructure/s6-overlay/inertia-ssr/type

@@ -0,0 +1 @@
+longrun

Dockerfile

@@ -0,0 +1,97 @@
+ARG NODE_VERSION=22
+
+# Base Image
+# https://serversideup.net/open-source/docker-php/docs
+FROM serversideup/php:8.4-fpm-nginx-alpine AS base
+USER root
+RUN install-php-extensions bcmath gd pgsql
+
+# Node Image
+FROM node:${NODE_VERSION}-alpine AS node
+
+# Install Composer packages
+FROM base AS composer
+WORKDIR /var/www/html
+COPY composer.json composer.lock ./
+RUN composer install --no-dev --optimize-autoloader --no-scripts --no-interaction
+
+# Install and bundle NPM packages
+FROM node:${NODE_VERSION}-alpine AS build-assets
+WORKDIR /var/www/html
+COPY package*.json ./
+RUN npm ci
+COPY --from=composer /var/www/html/vendor/tightenco/ziggy ./vendor/tightenco/ziggy
+COPY vite.config.ts ./
+COPY resources ./resources
+RUN npm run build
+
+# Development Image
+FROM base AS development
+ARG USER_ID
+ARG GROUP_ID
+USER root
+RUN apk update \
+    && apk add --no-cache curl git bash gnupg postgresql-client openssh-client \
+    && apk add --no-cache --virtual .build-deps build-base autoconf \
+    && install-php-extensions xdebug \
+        bcmath \
+        gd \
+        intl \
+        mysqli \
+        pdo_mysql \
+        curl \
+        dom \
+        fileinfo \
+        filter \
+        hash \
+        mbstring \
+        openssl \
+        pcre \
+        session \
+        xml \
+        redis \
+        opcache \
+        zip \
+        exif \
+    && rm -rf /var/cache/apk/* \
+    && apk del --force-broken-world .build-deps
+COPY --from=node /usr/lib /usr/lib
+COPY --from=node /usr/local/lib /usr/local/lib
+COPY --from=node /usr/local/include /usr/local/include
+COPY --from=node /usr/local/bin /usr/local/bin
+COPY .devcontainer/.bashrc /home/www-data/.bashrc
+COPY .devcontainer/xdebug.ini /usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini
+RUN usermod -s /bin/bash www-data \
+    && git config --global --add safe.directory /var/www/html \
+    && mkdir -p /home/www-data/.ssh \
+    && chown www-data:www-data /home/www-data/.ssh \
+    && chown www-data:www-data /home/www-data/.bashrc \
+    && docker-php-serversideup-set-id www-data $USER_ID:$GROUP_ID \
+    && docker-php-serversideup-set-file-permissions --owner $USER_ID:$GROUP_ID --service nginx
+WORKDIR /var/www/html
+USER www-data
+
+# Production Image
+FROM base AS release
+WORKDIR /var/www/html
+COPY --chown=www-data:www-data --from=composer /var/www/html/vendor ./vendor
+COPY --chown=www-data:www-data --from=build-assets /var/www/html/public/build ./public/build
+COPY --chown=www-data:www-data . .
+USER www-data
+
+# SSR Production Image
+FROM base AS ssr-release
+COPY --from=node /usr/lib /usr/lib
+COPY --from=node /usr/local/lib /usr/local/lib
+COPY --from=node /usr/local/include /usr/local/include
+COPY --from=node /usr/local/bin /usr/local/bin
+COPY --chown=www-data:www-data --chmod=755 .infrastructure/s6-overlay/inertia-ssr /etc/s6-overlay/s6-rc.d/inertia-ssr
+RUN touch /etc/s6-overlay/s6-rc.d/user/contents.d/inertia-ssr \
+    && chown www-data:www-data /etc/s6-overlay/s6-rc.d/user/contents.d/inertia-ssr \
+    && chmod 755 /etc/s6-overlay/s6-rc.d/user/contents.d/inertia-ssr
+WORKDIR /var/www/html
+COPY --chown=www-data:www-data --from=composer /var/www/html/vendor ./vendor
+COPY --chown=www-data:www-data --from=build-assets /var/www/html/public/build ./public/build
+COPY --chown=www-data:www-data --from=build-assets /var/www/html/bootstrap/ssr ./bootstrap/ssr
+COPY --chown=www-data:www-data . .
+USER www-data

app/Providers/AppServiceProvider.php

@@ -2,6 +2,8 @@
 
 namespace App\Providers;
 
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\URL;
 use Illuminate\Support\ServiceProvider;
 
 class AppServiceProvider extends ServiceProvider
@@ -19,6 +21,11 @@ public function register(): void
      */
     public function boot(): void
     {
-        //
+        $isProduction = $this->app->isProduction();
+        if ($isProduction) {
+            URL::forceScheme('https');
+        }
+        // Prohibits: db:wipe, migrate:fresh, migrate:refresh, and migrate:reset
+        DB::prohibitDestructiveCommands($isProduction);
     }
 }

bootstrap/app.php

@@ -29,6 +29,14 @@
                 BaseEncryptCookies::class => EncryptCookies::class
             ],
         );
+        // TrustProxies middleware for Traefik handling assets over https
+        /* $middleware->trustProxies(
+            at: '*',
+            headers: Request::HEADER_X_FORWARDED_FOR
+            | Request::HEADER_X_FORWARDED_HOST
+            | Request::HEADER_X_FORWARDED_PORT
+            | Request::HEADER_X_FORWARDED_PROTO
+        ); */
     })
     ->withExceptions(function (Exceptions $exceptions) {
         $exceptions->respond(function (Response $response, Throwable $exception, Request $request) {

docker/local/database/pgsql/create-testing-database.sql → database/create-pg-testing-database.sql

@@ -1,2 +1,3 @@
+-- create a PostgreSQL testing db for PHPUnit test suite
 SELECT 'CREATE DATABASE testing'
 WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'testing')\gexec

docker-compose.dev.yml

@@ -0,0 +1,56 @@
+services:
+  laravel:
+    build:
+      context: .
+      dockerfile: Dockerfile
+      target: development
+      args:
+        USER_ID: '${USER_ID:-1000}'
+        GROUP_ID: '${GROUP_ID:-1000}'
+    extra_hosts:
+      - 'host.docker.internal:host-gateway'
+    #ports:
+      #- '${VITE_APP_PORT:-5173}:${VITE_APP_PORT:-5173}' # Not necessarily required for dev containers (auto port forwarding)
+    environment:
+      PHP_OPCACHE_ENABLE: '1'
+      PHP_OPCACHE_REVALIDATE_FREQ: '0'
+      XDEBUG_MODE: '${XDEBUG_MODE:-off}'
+    volumes:
+      - '.:/var/www/html'
+    labels:
+      - 'traefik.enable=true'
+      - 'traefik.http.routers.laravel-primevue.rule=Host(`${APP_DOMAIN}`)'
+      - 'traefik.http.services.laravel-primevue.loadbalancer.server.port=8080' # exposed http port from serversideup image
+    networks:
+      - proxy
+      - laravel
+    depends_on:
+      - pgsql
+
+  pgsql:
+    image: 'postgres:17'
+    ports:
+      - '${DB_FORWARD_PORT:-5432}:5432'
+    environment:
+      PGPASSWORD: '${DB_PASSWORD:-secret}'
+      POSTGRES_DB: '${DB_DATABASE}'
+      POSTGRES_USER: '${DB_USERNAME}'
+      POSTGRES_PASSWORD: '${DB_PASSWORD:-secret}'
+    volumes:
+      - 'postgres-data:/var/lib/postgresql/data'
+      - './database/create-pg-testing-database.sql:/docker-entrypoint-initdb.d/10-create-testing-database.sql'
+    networks:
+      - laravel
+    healthcheck:
+      test: [ "CMD", "pg_isready", "-q", "-d", "${DB_DATABASE}", "-U", "${DB_USERNAME}" ]
+      retries: 3
+      timeout: 5s
+
+volumes:
+  postgres-data:
+
+networks:
+  laravel:
+  proxy:
+    name: traefik_network
+    external: true