islandora/nginx repository overview

⁠Nginx

Docker image for Nginx⁠ and source-built PHP 8.4 FPM⁠.

Built from Islandora-DevOps/isle-buildkit nginx⁠

Please refer to the Nginx Documentation⁠ and FPM Documentation⁠ for more in-depth information.

Acts as base Docker image for all PHP based services, such as nginx, Docker etc. It can be used on it's own as well.

⁠Dependencies

Requires islandora/base Docker image to build. Please refer to the Base Image README⁠ for additional information.

⁠Settings

⁠Nginx Settings

⁠PHP Settings

⁠Updating

You can change the release used for composer by modifying the build argument COMPOSER_VERSION and COMPOSER_SHA256 in the Dockerfile shown as XXXXXXXXXXXX in the following snippet:

ARG COMPOSER_VERSION=XXXXXXXXXXXX
#...
ARG COMPOSER_SHA256=XXXXXXXXXXXX

You can generate the SHA256 with the following commands:

COMPOSER_VERSION=$(cat nginx/Dockerfile | grep -o 'COMPOSER_VERSION=.*' | cut -f2 -d=)
COMPOSER_FILE=$(cat nginx/Dockerfile | grep -o 'COMPOSER_FILE=.*' | cut -f2 -d=)
COMPOSER_URL=$(cat nginx/Dockerfile | grep -o 'COMPOSER_URL=.*' | cut -f2 -d=)
FILE=$(eval "echo $COMPOSER_FILE")
URL=$(eval "echo $COMPOSER_URL")
wget --quiet "${URL}"
shasum -a 256 "${FILE}" | cut -f1 -d' '
rm "${FILE}"

⁠Building PHP from source

Dockerfile builds PHP 8.4 from the vendored Alpine aport in build/, then installs the signed local APKs into the runtime image. It does not wait for Alpine's PHP binary packages. The aport retains Alpine's patches, extension packages, configuration paths, and upstream test suite. Its build dependencies exclude the prebuilt PHP runtime.

Build with make build TARGET=nginx. The php-build stage is independent of Composer, runtime package pins, and rootfs, so Docker reuses the compiled PHP layer when those change. PHP/aport or pinned Alpine base changes invalidate it. CI already imports the nginx registry cache separately for amd64 and arm64 and exports intermediate layers on main (mode=max in docker-bake.hcl).

Renovate tracks stable PHP 8.4 tags directly from php/php-src and runs ci/update-php.sh to update the aport checksum and runtime version together. These updates bypass the weekly dependency grouping. The current Renovate job checks daily; it can also be dispatched manually for urgent releases. To update immediately, run bash ci/update-php.sh 8.4.27 with the desired 8.4 patch version. The script verifies the archive against PHP.net's published SHA-256 before writing its SHA-512 into the aport. An upgrade remains subject to the normal build and test pipeline.

The aport was vendored from Alpine aports commit b42029ecc52c7679bbda71bb09830f6813648c31 on 3.24-stable. When refreshing Alpine patches or changing the Alpine base, review the upstream aport as well.