examples

Author: Tob1as

examples/README.md

@@ -2,8 +2,9 @@
 
 All examples for [WSC (WoltLab Suite Core)](https://www.woltlab.com/en/woltlab-suite-download/)!
 
-* fpm-nginx-dhi: php-fpm, nginx, mysql, traefik, prometheus-exporters - only using DHI (Docker Hardened Images) - for more Details/Help read README.md in folder!
-* fpm-nginx-dhi-k8s: fpm-nginx-dhi for Kubernetes/K8s (tested on K3s)
-* fpm-nginx: like fpm-nginx-dhi, but offical docker community images and other (Notice: mysql replaced by mariadb) 
-* fpm-nginx-aio: like fpm-nginx, but php-fpm and nginx in single container/image
-* apache: apache2 and php in single container/image, mariadb, traefik, prometheus-exporters
+* fpm-nginx-dhi: php-fpm, nginx, mysql, traefik, prometheus-exporters without entrypoint script - only using DHI (Docker Hardened Images) - for more Details/Help read README.md in folder!
+* fpm-nginx-dhi-k8s: like fpm-nginx-dhi but for Kubernetes/K8s (tested on K3s) - for more Details/Help read README.md in folder!
+* fpm-nginx-doi: like fpm-nginx-dhi, but Docker Offical Images (DOI, from Community) and also without entrypoint script.
+* fpm-nginx: like fpm-nginx-doi, but Docker Offical Images with entrypoint script from this repo. (Notice: mysql replaced by mariadb) 
+* fpm-nginx-aio: like fpm-nginx, but php-fpm and nginx in single container/image with entrypoint script from this repo.
+* apache: apache2 and php in single container/image, mariadb, traefik, prometheus-exporters with entrypoint script from this repo.

examples/apache/README.md

@@ -0,0 +1,4 @@
+# PHP - Examples: [PHP & Apache2] & MariaDB (using DOI)
+
+> PHP & Apache2 
+> ... with entrypoint Script from this repo!

examples/fpm-nginx-aio/README.md

@@ -0,0 +1,4 @@
+# PHP - Examples: [PHP-FPM & NGINX] as AIO & MariaDB (using DOI)
+
+> PHP-FPM & NGINX in single Container as All-In-One (AIO)  
+> ... with entrypoint Script from this repo!

examples/fpm-nginx-aio/docker-compose.yml

@@ -2,7 +2,7 @@ services:
 
   # https://github.com/Tob1as/docker-php
   # based on: https://hub.docker.com/_/php (https://github.com/docker-library/php)
-  # command: mkdir ./html && chown 33:33 ./html
+  # command: mkdir ./html && chown 82:82 ./html
   wsc-php:
     image: docker.io/tobi312/php:8.4-fpm-nginx-alpine-wsc
     container_name: wsc-php

examples/fpm-nginx-doi/.env.example

@@ -0,0 +1,11 @@
+# General
+DOMAIN=example.com
+TIMEZONE=Europe/Berlin
+# Database (MySQL/MariaDB)
+MYSQL_ROOT_PASSWORD=my-secret-pw
+MYSQL_DATABASE=woltlab_suite
+MYSQL_USER=woltlab_suite
+MYSQL_PASSWORD=my-secret-pw
+# Exporter
+MYSQL_EXPORTER_USER=exporter
+MYSQL_EXPORTER_PASSWORD=my-secret-pw

examples/fpm-nginx-doi/README.md

@@ -0,0 +1,3 @@
+# PHP - Examples: PHP-FPM & NGINX & MariaDB (using DOI)
+
+> ... without entrypoint Script from this repo!

examples/fpm-nginx-doi/config/mysql_exporter-user.sh

@@ -0,0 +1,21 @@
+#!/bin/sh
+set -e
+
+# SOURCE: https://github.com/Tob1as/docker-kubernetes-collection/blob/master/examples_docker-compose/config_mariadb/20_exporter-user.sh
+
+: "${EXPORTER_USER:="exporter"}"
+: "${EXPORTER_PASSWORD:="Exp0rt3r!"}"
+: "${EXPORTER_MAXUSERCONNECTIONS:="3"}"
+host='%' # set '%' to allow from all host
+
+mariadb -h localhost -u root --password="${MARIADB_ROOT_PASSWORD}" -sNe \
+"SELECT user FROM mysql.user WHERE user = '${EXPORTER_USER}' GROUP BY user;" \
+| grep -q ${EXPORTER_USER}} \
+|| mariadb -h localhost -u root --password="${MARIADB_ROOT_PASSWORD}" -sN <<EOSQL
+    CREATE USER '${EXPORTER_USER}'@'${host}' IDENTIFIED BY '${EXPORTER_PASSWORD}' WITH MAX_USER_CONNECTIONS ${EXPORTER_MAXUSERCONNECTIONS};
+    GRANT PROCESS, REPLICATION CLIENT, SELECT, SLAVE MONITOR ON *.* TO '${EXPORTER_USER}'@'${host}';
+    GRANT SELECT ON performance_schema.* TO '${EXPORTER_USER}'@'${host}';
+    FLUSH PRIVILEGES;
+EOSQL
+
+mariadb -h localhost -u root --password=${MARIADB_ROOT_PASSWORD} -e "SELECT user, host, max_user_connections FROM mysql.user;"

examples/fpm-nginx-doi/config/mysql_wsc.cnf

@@ -0,0 +1,2 @@
+[server]
+innodb_buffer_pool_size = 512M

examples/fpm-nginx-doi/config/nginx_default.conf

@@ -0,0 +1,96 @@
+# enable ONLY behind PROXY (Traefik, other NGINX, Caddy, lighttpd, K8s Ingress, ...) (ngx_http_realip_module)
+set_real_ip_from 172.16.0.0/12;
+set_real_ip_from fd00::/8;
+real_ip_header X-Forwarded-For;
+#real_ip_recursive on;
+
+# Server (http)
+server {
+    listen 8080;
+    listen [::]:8080;
+    server_name _;
+    
+    # disable any limits to avoid HTTP 413 for large image uploads
+    client_max_body_size 0;
+    
+    # Error Page
+    location  @error_page {
+        add_header Content-Type text/plain;
+        return 200 'Maintenance mode!';
+    }
+    
+    root /var/www/html;
+    index index.php index.html test.php;
+    
+    location / {
+        #root /var/www/html;
+        #index index.php index.html;
+        
+        try_files $uri $uri/ /index.php?$query_string;
+    }
+    
+    location ~ \.php$ {
+        #root /var/www/html;
+        
+        try_files $uri =404;
+        
+        fastcgi_pass wsc-php:9000;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        include fastcgi_params;
+        
+        # Error Page (redirect)
+        error_page 502 503 504 = @error_page;
+    }
+    
+    # nginx status
+    location = /nginx_status {
+        stub_status on;
+        access_log off;
+        allow 127.0.0.1;
+        allow 10.0.0.0/8;
+        allow 172.16.0.0/12;
+        allow 192.168.0.0/16;
+        allow ::1;
+        allow fd00::/8;
+        deny all;
+    }
+
+    # nginx ping
+    location = /nginx_ping {
+        add_header Content-Type text/plain;
+        return 200 'pong';
+        access_log off;
+        allow 127.0.0.1;
+        allow 10.0.0.0/8;
+        allow 172.16.0.0/12;
+        allow 192.168.0.0/16;
+        allow ::1;
+        allow fd00::/8;
+        deny all;
+    }
+    
+    # php-fpm status/ping
+    location ~ ^/(php_fpm_status|php_fpm_ping)$ {
+        fastcgi_pass wsc-php:9001;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        include fastcgi_params;
+        access_log off;
+        allow 127.0.0.1;
+        allow 10.0.0.0/8;
+        allow 172.16.0.0/12;
+        allow 192.168.0.0/16;
+        allow ::1;
+        allow fd00::/8;
+        deny all;
+        
+        # Error Page (redirect)
+        error_page 502 503 504 = @error_page;
+    }
+    
+    location ~ /\.ht {
+        deny all;
+    }
+    #location = /favicon.ico { log_not_found off; access_log off; }
+    #location = /robots.txt { log_not_found off; access_log off; }
+}