Michal Čihař
6f28900cf9
Increase fastcgi_read_timeout
...
Fixes #120
Signed-off-by: Michal Čihař <michal@cihar.com >
2017-04-28 11:54:58 +02:00
Michal Čihař
1bcaeb5fec
Fix getting empty values from environment
...
If environemnt variable is empty and is not part of $_ENV, the getenv
(obviously) returns empty string, but we should use it.
Fixes #118
Signed-off-by: Michal Čihař <michal@cihar.com >
2017-04-11 17:28:29 +02:00
Michal Čihař
1204bcd696
Do not set password to null when not specified
...
This makes the authentication code think this parameter was not set at
all.
Fixes #118
Signed-off-by: Michal Čihař <michal@cihar.com >
2017-04-11 17:21:32 +02:00
ericfjosne and Michal Čihař
447c731aaa
Add PMA_PORTS configuration
...
Now enabling custom port for each hosts of the PMA_HOSTS environment variable, through the use of a new PMA_PORTS environment variable.
Fixes #112
2017-04-07 15:24:36 +02:00
Michal Čihař
e2052a2066
Enable opcache fast shutdown
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2017-03-02 09:54:30 +01:00
Michal Čihař
6e3955516f
Disable opcache.use_cwd
...
All scripts are executed in single working directory, so it should not
cause any harm and according to documentation it should perform better.
Issue #98
Signed-off-by: Michal Čihař <michal@cihar.com >
2017-03-02 09:45:40 +01:00
Michal Čihař
29d69f34ad
Disable opcache API
...
By setting non existing path as restrict_api.
Fixes #65
Signed-off-by: Michal Čihař <michal@cihar.com >
2017-03-02 09:44:13 +01:00
Michal Čihař
ddfe8e2b1c
Update php.ini
...
Update to match php.ini-production from PHP 7.0.
Signed-off-by: Michal Čihař <michal@cihar.com >
2017-03-02 09:40:43 +01:00
Michal Čihař
facd453fc2
Disable allow_url_fopen
...
Fixes #55
Signed-off-by: Michal Čihař <michal@cihar.com >
2017-03-02 09:27:46 +01:00
Michal Čihař
e943ff30d0
Merge remote-tracking branch 'origin/pull/94' into alpine-3.5
2017-01-02 17:00:46 +01:00
Michal Čihař
19a74cb25f
Fix program name
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2017-01-02 16:56:07 +01:00
Michal Čihař
bca3574cf3
Use absolute path here
...
Issue #95
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-11-30 11:34:21 +01:00
Sam Mousa
f626ed635b
Updated to use alpine edge and php7.
2016-11-28 10:40:43 +01:00
Michal Čihař
2a761b2a73
Increase upload size limit to 512MB
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-11-28 10:39:25 +01:00
Michal Čihař
f581555bcf
Move all configuration to /etc
...
* configuration is now in /etc
* reorder commands for better Docker layer caching
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-11-28 10:19:52 +01:00
Michal Čihař
29bcc43956
Allow only GET, HEAD and POST methods
...
Fixes #64
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-10-18 13:03:27 +02:00
Michal Čihař
379a7df699
Avoid extending try_files too much
...
Fixes #63
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-10-18 13:03:27 +02:00
Michal Čihař
ab9d56ffc1
Deny access to all hidden files
...
Fixes #67
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-10-18 13:03:27 +02:00
Michal Čihař and GitHub
e3abc1a5bd
Merge pull request #76 from nijel/php-name
...
Avoid encoding PHP version in socket or log name
2016-10-18 12:58:12 +02:00
Michal Čihař
b2c5075876
Avoid encoding PHP version in socket or log name
...
Fixes #68
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-10-18 12:39:18 +02:00
Michal Čihař
9ddd36cd25
Optimize PHP opcache settings
...
- opcache.save_comments=0 to avoid storing comments which we do not need
- opcache.validate_timestamps=0 the timestamps validation should not be
needed as container is restarted on change
- fixes #71
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-10-18 12:33:58 +02:00
Michal Čihař
0a9d050db1
Allow access to /tmp
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-09-26 10:01:33 +02:00
Michal Čihař
7b9abff0ff
Deny access to libraries and templates
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-09-26 09:18:00 +02:00
Michal Čihař
ad4b811c44
Set loglevel for PHP-FPM
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-09-26 09:15:27 +02:00
Michal Čihař
0fd626c1f6
Enable open_basedir in PHP
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-09-26 09:15:15 +02:00
Michal Čihař
e415b21140
Make listen mode more secure
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-09-26 09:03:12 +02:00
Michal Čihař
90551173a8
Use https links
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-09-22 09:08:01 +02:00
Michal Čihař
b3eb5ffd23
Use SHA-1 for session hash
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-09-22 08:50:17 +02:00
Michal Čihař
3554ecfe19
Do not expose nginx version
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-09-22 08:49:34 +02:00
Michal Čihař
dc56655368
Move PHP socket
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-09-20 11:56:05 +02:00
Michal Čihař
8496f8fd25
Start PHP-FPM as nobody
...
Issue #52
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-09-20 11:47:42 +02:00
Michal Čihař
f5fb1e42f9
Increase upload_max_filesize to be in sync with other settings
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-08-29 10:54:30 +02:00
Michal Čihař
5acaf20477
Whitespace cleanup in nginx configuration
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-08-29 08:13:54 +02:00
Michal Čihař
7f07a54e26
Configure temp file for bigger uploads
...
Issue #32
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-08-29 08:13:16 +02:00
Michal Čihař
4b12fdda7c
Disable fastcgi buffering
...
We can immedieately send out fastcgi response.
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-08-29 08:11:48 +02:00
Michal Čihař
0ffb4af4c4
Increase maximal execution time
...
- This is needed to allow big SQL uploads.
- Also keep in sync nginx and PHP limit.
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-08-29 08:06:29 +02:00
Michal Čihař
a76914f87d
Increase nginx buffers and maximal request size
...
We can expect people posting big SQL files, so let's allow 128M.
Issue #32
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-08-29 08:05:12 +02:00
Michal Čihař
0c3251bf9e
Disable environment cleanup on PHP FPM
...
We pass settings by environment, so it has to be preserved.
Fixes #49
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-08-28 19:21:40 +02:00
Michal Čihař
d12c0493ee
Improve sessions configuration
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-08-28 09:10:37 +02:00
Michal Čihař
00ff178fd1
Add php.ini configuration file
...
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-08-28 09:09:03 +02:00
Michal Čihař
d70630f09a
Initial attempt to use nginx + php-fpm
...
Replaced php built in server with supervisord + nginx + php-fpm.
Signed-off-by: Michal Čihař <michal@cihar.com >
2016-08-27 13:24:55 +02:00