Compare commits

..

115 Commits

Author SHA1 Message Date
David Bomba
b599ca5905 Merge pull request #845 from Thulium-Drake/fix_init
Ensure that the target folder is present before copying files into it
2025-12-28 09:50:53 +11:00
Jeffrey van Pelt
d222163f82 Fix syntax to match other folders 2025-12-24 13:04:50 +01:00
Jeffrey van Pelt
d81eb48e55 Ensure that the target folder is present before copying files into it 2025-12-20 12:11:55 +01:00
David Bomba
a7f9ed049c Merge pull request #844 from benbrummer/debian
Change mv to cp for public folder update
2025-12-19 22:19:47 +11:00
benbrummer
aec886c9eb Fix rm command to remove all files in public folder
Signed-off-by: benbrummer <info@benjamin-brummer.de>
2025-12-18 16:07:16 +01:00
benbrummer
84efa573f0 Change mv to cp for public folder update
Replaced mv command with cp for copying files to public folder and added cleanup of temporary public files. This is a robust alternative to mv for e.g ZFS and docker overlay2

Signed-off-by: benbrummer <info@benjamin-brummer.de>
2025-12-18 16:00:21 +01:00
David Bomba
849fc2365d Merge pull request #841 from turbo124/debian
Set default memory limit
2025-12-18 09:08:25 +11:00
David Bomba
adfa143861 Set default memory limit 2025-12-18 09:07:30 +11:00
David Bomba
b80e842ad7 Merge pull request #832 from benbrummer/debian
unicode emoji for dockerhub
2025-11-05 09:46:05 +11:00
Benjamin Brummer
f8550e7e0d unicode emoji 2025-11-04 14:08:55 +01:00
David Bomba
f775866abf Merge pull request #831 from turbo124/debian
Fixes for release for debian/octane
2025-11-04 10:00:42 +11:00
David Bomba
85fad200a0 Fixes for release for debian/octane 2025-11-04 09:59:10 +11:00
David Bomba
16022da2ac Merge pull request #829 from benbrummer/debian
url as argument
2025-10-30 06:57:57 +11:00
Benjamin Brummer
40817ae28c move chown to next stage 2025-10-29 14:16:12 +01:00
Benjamin Brummer
af5e8d6b4f remove duplicate line 2025-10-29 13:49:25 +01:00
Benjamin Brummer
cf822e0de9 url as argument 2025-10-29 13:38:29 +01:00
Benjamin Brummer
79dde723bd ADD sets rw only for root 2025-10-29 08:33:47 +01:00
David Bomba
c90298d29c Merge pull request #823 from TheNewSound/patch-2
Update Dockerfile to use ADD for downloading files, instead of RUN curl
2025-10-29 16:28:18 +11:00
David Bomba
b9ba364665 Merge pull request #826 from benbrummer/debian
Fix build workflow
2025-10-29 10:53:15 +11:00
Benjamin Brummer
77807f94f4 cleanup workflow 2025-10-28 15:01:47 +01:00
Benjamin Brummer
854b104915 Update badges 2025-10-28 14:54:05 +01:00
TheNewSound
192c59d596 Remove --chown and rm from Dockerfile
Signed-off-by: TheNewSound <info@worldwidecrap.nl>
2025-10-28 09:01:47 +01:00
Benjamin Brummer
fc6d89b9ef Cleanup 2025-10-28 08:57:58 +01:00
Benjamin Brummer
b572bccd0e no push and merge 2025-10-28 08:44:59 +01:00
Benjamin Brummer
b9bef3e436 update triggers to run for changes in .github 2025-10-28 08:38:06 +01:00
Benjamin Brummer
475335244f Secrets are not available for pull requests from a fork 2025-10-28 08:25:52 +01:00
TheNewSound
0a774f9283 Use --chown in Dockerfile to set permissions
Signed-off-by: TheNewSound <info@worldwidecrap.nl>
2025-10-27 23:35:10 +01:00
TheNewSound
d639f649a3 Modify tar command in Dockerfile
Removed strip-components option from tar command.

Signed-off-by: TheNewSound <info@worldwidecrap.nl>
2025-10-27 16:54:22 +01:00
TheNewSound
b40a60a12d Fix ownership command for invoiceninja tarball
Signed-off-by: TheNewSound <info@worldwidecrap.nl>
2025-10-27 16:48:15 +01:00
TheNewSound
e1ed2f0eab Update Dockerfile
Fix permissions of downloaded tar.gz file via ADD

Signed-off-by: TheNewSound <info@worldwidecrap.nl>
2025-10-27 16:39:04 +01:00
TheNewSound
f9d8cf1fee Update Dockerfile to use ADD for downloading files
Replaced curl command with ADD instruction for downloading Invoice Ninja instead of RUN curl.

Signed-off-by: TheNewSound <info@worldwidecrap.nl>
2025-10-27 13:48:26 +01:00
David Bomba
7ab9653a2a Merge pull request #821 from benbrummer/debian
Correct minor version formatting in publish-image.yaml
2025-10-22 07:49:09 +11:00
benbrummer
82a9c8ae19 Correct minor version formatting in publish-image.yaml
Fix formatting of minor version in image tags.

Signed-off-by: benbrummer <info@benjamin-brummer.de>
2025-10-21 13:56:47 +02:00
David Bomba
182b600da3 Merge pull request #820 from benbrummer/debian
TAGS without REGISTRY_IMAGE
2025-10-21 18:09:14 +11:00
Benjamin Brummer
279bb447a5 separate version job with outputs for tags 2025-10-21 09:02:16 +02:00
Benjamin Brummer
f6173f458b TAGS without REGISTRY_IMAGE 2025-10-21 08:33:44 +02:00
David Bomba
c000f42e61 Merge pull request #819 from benbrummer/debian
Rename secret
2025-10-21 07:20:28 +11:00
benbrummer
c348f92aa9 rename secret 2025-10-20 22:11:31 +02:00
benbrummer
d8d8415771 Rename secret 2025-10-20 22:07:35 +02:00
David Bomba
f897dc3b2d Merge pull request #818 from benbrummer/debian
manifest creation for multiple runners
2025-10-21 06:55:23 +11:00
Benjamin Brummer
98f60d721c multiple runner publish 2025-10-20 21:45:11 +02:00
benbrummer
ea252c7891 multiple runner build 2025-10-20 21:01:35 +02:00
Benjamin Brummer
abeae7fb64 Publish manifest for multiple runners 2025-10-20 10:33:37 +02:00
Benjamin Brummer
fbb4bd29f7 handle digest 2025-10-20 10:31:21 +02:00
Benjamin Brummer
7bb84355df initial commit for manifest creation for multiple runners 2025-10-20 09:34:35 +02:00
David Bomba
3509d03cf5 Merge pull request #816 from benbrummer/debian
Compose file refactoring - Debian
2025-10-01 18:11:47 +10:00
Benjamin Brummer
3ea9b66fde Default timing configuration for healthcheck should be sufficient 2025-10-01 07:50:27 +02:00
Benjamin Brummer
15feba28e5 Let compose create the network for the stack 2025-10-01 07:23:58 +02:00
Benjamin Brummer
b1ee5a8e98 Use docker default logging configuration 2025-10-01 07:18:49 +02:00
benbrummer
daccb15073 Merge branch 'invoiceninja:debian' into debian 2025-09-30 13:40:41 +02:00
Benjamin Brummer
5970556335 Mounting .env file is redundant with env_file: 2025-09-30 13:20:39 +02:00
Benjamin Brummer
e1cf8751db Do not pass all variables into mysql container 2025-09-30 13:16:14 +02:00
David Bomba
1ef35c361c Merge pull request #814 from benbrummer/debian
Push README.md to DockerHub
2025-09-30 21:07:45 +10:00
Benjamin Brummer
47b370601c Push README.md to DockerHub 2025-09-30 12:56:53 +02:00
David Bomba
c72b175630 Merge pull request #812 from benbrummer/debian
Fix syntax error for cron
2025-09-30 18:55:22 +10:00
benbrummer
303c34665b Merge branch 'invoiceninja:debian' into debian 2025-09-30 10:53:31 +02:00
Benjamin Brummer
094762fcc1 fix cron 2025-09-30 10:52:12 +02:00
David Bomba
fac0ae1798 Merge pull request #811 from benbrummer/debian
Fix Unexpected input(s) 'stale-label', 'only-issues'
2025-09-30 18:51:53 +10:00
Benjamin Brummer
8eee7f9a1a Fix Unexpected input(s) 'stale-label', 'only-issues' 2025-09-30 10:45:16 +02:00
David Bomba
7238c8fab4 Merge pull request #808 from benbrummer/debian
Remove artisan package:discover
2025-09-30 07:07:28 +10:00
Benjamin Brummer
6e24faee43 matrix build with arm runners 2025-09-29 22:14:49 +02:00
Benjamin Brummer
1895f822f5 Update upgrade instructions 2025-09-29 14:12:35 +02:00
Benjamin Brummer
7a985b4d0d Remove redundant package discovery command from production setup 2025-09-29 14:06:41 +02:00
David Bomba
6c8a692c5e Merge pull request #805 from benbrummer/debian
Optimize artisan commands and add healthcheck as condition for app
2025-09-29 08:10:00 +10:00
Benjamin Brummer
91a2a106e0 Optimize artisan commands 2025-09-28 09:15:52 +02:00
Benjamin Brummer
7bd0a56260 Increase start-period, as initialization and migrations can take some time 2025-09-28 09:15:17 +02:00
Benjamin Brummer
32e59e289b Add healthcheck as condition for app 2025-09-26 15:17:44 +02:00
David Bomba
bafea492a9 Merge pull request #797 from benbrummer/debian
Create app/public
2025-09-09 07:31:56 +10:00
benbrummer
9a56657aa4 Create app/public
Signed-off-by: benbrummer <info@benjamin-brummer.de>
2025-09-08 16:41:17 +02:00
David Bomba
f36968c788 Merge pull request #792 from turbo124/debian
Rollback to 8.4
2025-09-03 07:27:56 +10:00
David Bomba
ee060b45fd Rollback to 8.4 2025-09-03 07:27:21 +10:00
David Bomba
430955d43f Merge pull request #790 from turbo124/debian
Roll back to PHP 8.3
2025-09-02 18:55:52 +10:00
David Bomba
abc66d2491 Roll back to PHP 8.3 2025-09-02 18:54:51 +10:00
David Bomba
d75b8e3616 Merge pull request #789 from benbrummer/debian
Workaround: Disable SSL for mariadb-client for compatibility with MySQL
2025-09-02 06:22:16 +10:00
benbrummer
085df042c1 Workaround: Disable SSL for mariadb-client for compatibility with MySQL 2025-09-01 21:36:45 +02:00
David Bomba
b67f49b9ba Merge pull request #784 from benbrummer/debian
HEALTHCHECK, mariadb-client and PHP 8.4
2025-08-29 22:02:27 +10:00
benbrummer
d1621f0fe5 PHP 8.4
Signed-off-by: benbrummer <info@benjamin-brummer.de>
2025-08-29 12:57:55 +02:00
benbrummer
61728ec89b Fix mariadb-client connection to mysql
Debian Trixie has a new mariadb-client, with encryption by default

Signed-off-by: benbrummer <info@benjamin-brummer.de>
2025-08-29 12:51:27 +02:00
benbrummer
1bda3e5809 Use health endpoint for HEALTHCHECK
Signed-off-by: benbrummer <info@benjamin-brummer.de>
2025-08-29 08:02:56 +02:00
David Bomba
6a16f6f4de Merge pull request #770 from TheNewSound/debian
Use default supervisord config as baseline
2025-08-12 08:34:16 +10:00
v
68cfe612ee Start supervisord using /etc/supervisor/supervisord.conf so that a socket at /var/run is created (default supervisord config). 2025-08-01 15:45:54 +02:00
David Bomba
ed9c23d9c7 Merge pull request #753 from benbrummer/debian
saxon defaults now to 12.5.0
2025-05-11 09:44:26 +10:00
benbrummer
f6fa32f606 saxon defaults now to 12.5.0
Signed-off-by: benbrummer <info@benjamin-brummer.de>
2025-05-10 10:59:13 +02:00
David Bomba
a0454d3998 Merge pull request #745 from benbrummer/debian
remove bootstrap/cache volume
2025-04-05 06:49:13 +11:00
benbrummer
04f4dbe248 remove bootstrap/cache volume
align with docker hub tutorial about laravel
* https://docs.docker.com/guides/frameworks/laravel/
* https://github.com/dockersamples/laravel-docker-examples/blob/main/compose.prod.yaml#L14

Signed-off-by: benbrummer <info@benjamin-brummer.de>
2025-04-04 11:43:33 +02:00
benbrummer
a7822987b2 Merge pull request #744 from gianluigitrontini/debian
Fixes #743: Move conditionals for chromium/google chrome before artisan optimize
2025-04-03 16:47:12 +02:00
Gianluigi Trontini
7b7f3df710 Fixes #743: Move conditionals for chromium/google chrome at the top of the file 2025-04-03 15:37:52 +02:00
benbrummer
a9b3a8a8a4 Merge pull request #737 from RichyHBM/patch-1
Create required dirs if missing
2025-03-29 09:55:16 +01:00
Richy HBM
a53b702c45 Create required dirs if missing
Signed-off-by: Richy HBM <RichyHBM@users.noreply.github.com>
2025-03-27 16:04:35 +00:00
David Bomba
39c546e270 remove default prop for snappdf pay 2025-03-25 12:03:04 +11:00
David Bomba
9c0e00edb3 Add conditionals for chromium/google chrome 2025-03-25 12:02:47 +11:00
David Bomba
1f28106e43 Merge pull request #731 from benbrummer/debian
use github latest url, tar.gz without top level repository
2025-03-19 10:05:15 +11:00
David Bomba
c4513a868a Merge pull request #733 from fabiomanz/patch-1
Upgrade from old docker-compose syntax to v2 docker compose syntax
2025-03-18 02:54:22 +11:00
Fabio
856d47217e Upgrade from old docker-compose syntax to v2 docker compose syntax
Signed-off-by: Fabio <fabio.manz@t-online.de>
2025-03-17 13:57:36 +01:00
Benjamin Brummer
be0ec204d4 use github latest url, tar.gz without top level repository 2025-03-15 06:35:12 +00:00
David Bomba
9d99120693 Merge pull request #713 from turbo124/debian
Fixes for publish image regression - force 22.04
2025-01-24 16:12:59 +11:00
David Bomba
a5204ccb7d Fixes for publish image regression - force 22.04 2025-01-24 16:12:25 +11:00
David Bomba
995d70ab60 Merge pull request #706 from turbo124/debian
Fixes for php extension installer
2025-01-24 12:59:21 +11:00
David Bomba
11855e0701 Fixes for php extension installer 2025-01-24 12:58:04 +11:00
David Bomba
42816b6282 Require mbstring 2025-01-24 09:23:10 +11:00
David Bomba
2ad607fa2d Create auto-close-issues.yml
Signed-off-by: David Bomba <turbo124@gmail.com>
2025-01-21 13:47:56 +11:00
David Bomba
2c25caf627 Merge pull request #694 from benbrummer/debian
Fix for reap logging
2025-01-15 08:56:09 +11:00
benbrummer
a2b64d2060 Merge branch 'invoiceninja:debian' into debian 2025-01-14 22:32:43 +01:00
Benjamin Brummer
b58d4e1259 fix for reaps 2025-01-14 21:31:50 +00:00
Benjamin Brummer
a7683ada33 log to stdout 2025-01-14 21:19:38 +00:00
Benjamin Brummer
3e8a6c72a7 healthcheck for php-fpm master process 2025-01-14 21:19:25 +00:00
David Bomba
3b0f7c463a Merge pull request #691 from benbrummer/debian
php optimization
2025-01-15 08:18:25 +11:00
Benjamin Brummer
c00d44380c log worker to stdout/stderr 2025-01-13 16:34:49 +00:00
Benjamin Brummer
cb4120fc54 Multistage, single init.sh 2025-01-13 16:31:39 +00:00
Benjamin Brummer
f2c5a1f842 composer is not needed, permissions are already correct in the image 2025-01-13 13:11:50 +00:00
Benjamin Brummer
029bc57fac download invoiceninja.tar.gz 2025-01-13 13:09:33 +00:00
Benjamin Brummer
d60bf39950 set correct file-extension 2025-01-13 12:52:28 +00:00
Benjamin Brummer
31eb278f0d prefer files from image 2025-01-13 12:30:06 +00:00
Benjamin Brummer
44b460bf13 php optimization opcache and realpath 2025-01-13 12:22:01 +00:00
Benjamin Brummer
7bae300fd2 disable preload for artisan tinker 2025-01-13 12:20:03 +00:00
17 changed files with 338 additions and 288 deletions

24
.editorconfig Normal file
View File

@@ -0,0 +1,24 @@
# EditorConfig is awesome: https://EditorConfig.org
# top-most EditorConfig file
root = true
# Unix-style newlines with a newline ending every file
[*]
end_of_line = lf
insert_final_newline = true
# Matches multiple files with brace expansion notation
# Set default charset
[*.*]
charset = utf-8
# Tab indentation (no size specified)
[Makefile]
indent_style = tab
# Matches the files *.yml
[*.yml]
indent_style = space
indent_size = 2

19
.github/workflows/auto-close-issues.yml vendored Normal file
View File

@@ -0,0 +1,19 @@
name: Close stale issues after 5 days
on:
schedule:
- cron: "0 0 * * *"
jobs:
close-issues:
runs-on: ubuntu-latest
permissions:
issues: write
steps:
- uses: actions/stale@v10
with:
days-before-issue-stale: 4
days-before-issue-close: 1
stale-issue-label: "stale"
close-issue-message: "This issue has been automatically closed due to inactivity for 5 days."
repo-token: ${{ secrets.GITHUB_TOKEN }}
exempt-issue-labels: "keep-open,triage,bug"

View File

@@ -1,17 +1,17 @@
name: Build Octane Container Image
name: Build Debian Container Image
on:
pull_request:
paths:
- ".github/**"
- "octane/**"
- "debian/**"
push:
paths:
- ".github/**"
- "octane/**"
- "debian/**"
env:
REGISTRY_IMAGE: invoiceninja/invoiceninja-octane
REGISTRY_IMAGE: invoiceninja/invoiceninja-debian
jobs:
build:
@@ -40,8 +40,9 @@ jobs:
id: build
uses: docker/build-push-action@v6
with:
context: octane
context: debian
platforms: ${{ matrix.platform }}
labels: ${{ steps.meta.outputs.labels }}
tags: ${{ env.REGISTRY_IMAGE }}
outputs: type=image,push-by-digest=true,name-canonical=true
cache-from: type=gha

View File

@@ -1,4 +1,4 @@
name: Publish Octane Container Images
name: Publish Debian Container Images
on:
push:
@@ -6,7 +6,7 @@ on:
- "invoiceninja-*"
env:
REGISTRY_IMAGE: invoiceninja/invoiceninja-octane
REGISTRY_IMAGE: invoiceninja/invoiceninja-debian
jobs:
version:
@@ -79,7 +79,7 @@ jobs:
id: build
uses: docker/build-push-action@v6
with:
context: octane
context: debian
build-args: URL=${{ needs.version.outputs.url }}
platforms: ${{ matrix.platform }}
labels: ${{ steps.meta.outputs.labels }}

14
.gitignore vendored Normal file
View File

@@ -0,0 +1,14 @@
# OS files
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
ehthumbs.db
Thumbs.db
# Helm
charts/**/charts/
# Compose filesystem
/docker

View File

@@ -1,13 +1,13 @@
[![Docker Image Size](https://img.shields.io/docker/image-size/invoiceninja/invoiceninja-octane?label=octane)](https://hub.docker.com/r/invoiceninja/invoiceninja-octane)
[![Docker Pulls](https://img.shields.io/docker/pulls/invoiceninja/invoiceninja-octane)](https://hub.docker.com/r/invoiceninja/invoiceninja-octane)
[![Publish Status](https://github.com/invoiceninja/dockerfiles/actions/workflows/publish-image-octane.yaml/badge.svg)](https://github.com/invoiceninja/dockerfiles/actions/workflows/publish-image-octane.yaml)
[![Build Status](https://github.com/invoiceninja/dockerfiles/actions/workflows/build-image-octane.yaml/badge.svg)](https://github.com/invoiceninja/dockerfiles/actions/workflows/build-image-octane.yaml)
[![Docker Image Size](https://img.shields.io/docker/image-size/invoiceninja/invoiceninja-debian?label=debian)](https://hub.docker.com/r/invoiceninja/invoiceninja-debian)
[![Docker Pulls](https://img.shields.io/docker/pulls/invoiceninja/invoiceninja-debian)](https://hub.docker.com/r/invoiceninja/invoiceninja-debian)
[![Publish Status](https://github.com/invoiceninja/dockerfiles/actions/workflows/publish-image-debian.yaml/badge.svg)](https://github.com/invoiceninja/dockerfiles/actions/workflows/publish-image-debian.yaml)
[![Build Status](https://github.com/invoiceninja/dockerfiles/actions/workflows/build-image-debian.yaml/badge.svg)](https://github.com/invoiceninja/dockerfiles/actions/workflows/build-image-debian.yaml)
# Octane Docker for [Invoice Ninja](https://www.invoiceninja.com/)
# Debian Docker for [Invoice Ninja](https://www.invoiceninja.com/)
👑 **Features**
[FRANKENPHP](https://frankenphp.dev/)
NGINX webserver support [NGINX](https://nginx.org/)
Built-in Chrome for PDF generation and other features
Saxon XLST 2 engine
OPcache
@@ -18,8 +18,8 @@ Multi language support
This Debian-based image includes Chrome for enhanced PDF generation and other features. To get started:
```bash
git clone https://github.com/invoiceninja/dockerfiles.git -b octane
cd dockerfiles/octane
git clone https://github.com/invoiceninja/dockerfiles.git -b debian
cd dockerfiles/debian
```
Instead of defining our environment variables inside our docker-compose.yml file we now define this in the `.env` file, open this file up and insert your `APP_URL`, `APP_KEY` and update the rest of the variables as required.
@@ -51,10 +51,10 @@ The `APP_KEY` can be generated by running:
```bash
# If you haven't started the containers yet:
docker run --rm -it invoiceninja/invoiceninja-octane frankenphp php-cli artisan key:generate --show
docker run --rm -it invoiceninja/invoiceninja-debian php artisan key:generate --show
# Or if your containers are already running:
docker compose exec app frankenphp php-cli artisan key:generate --show
docker compose exec app php artisan key:generate --show
```
Copy the entire string and insert in the .env file at `APP_KEY=base64....`
@@ -91,4 +91,4 @@ This is a new image which should provide much better support for all users, howe
- [ ] Backup script
- [ ] Integrate soketi server
- [ ] Add elastic search for site wide search
- [ ] Add elastic search for site wide search

View File

@@ -1,5 +1,5 @@
# IN application vars
APP_URL=http://localhost
APP_URL=http://localhost:8012
APP_KEY=base64:RR++yx2rJ9kdxbdh3+AmbHLDQu+Q76i++co9Y8ybbno=
APP_ENV=production
APP_DEBUG=true

View File

@@ -1,42 +1,33 @@
ARG PHP_VERSION=8.4
ARG FRANKENPHP_VERSION=1
ARG DEBIAN_VERSION=trixie
ARG PHP=8.4
FROM dunglas/frankenphp:${FRANKENPHP_VERSION}-php${PHP_VERSION}-${DEBIAN_VERSION} AS prepare-app
FROM php:${PHP}-fpm AS prepare-app
ARG URL=https://github.com/invoiceninja/invoiceninja/releases/latest/download/invoiceninja.tar.gz
ADD ${URL} /tmp/invoiceninja.tar.gz
RUN tar -xf /tmp/invoiceninja.tar.gz \
&& ln -s ./resources/views/react/index.blade.php ./public/index.html \
# Symlink
RUN tar -xzf /tmp/invoiceninja.tar.gz -C /var/www/html \
&& ln -s /var/www/html/resources/views/react/index.blade.php /var/www/html/public/index.html \
&& php artisan storage:link \
# Octane
&& php artisan octane:install --server=frankenphp
# Workaround for application updates
&& mv /var/www/html/public /tmp/public
# ==================
# InvoiceNinja image
# ==================
FROM dunglas/frankenphp:${FRANKENPHP_VERSION}-php${PHP_VERSION}-${DEBIAN_VERSION}
ARG user=ninja
FROM php:${PHP}-fpm
# PHP modules
ARG php_require="bcmath gd mbstring pdo_mysql zip"
ARG php_suggest="exif imagick intl pcntl saxon soap"
ARG php_extra="opcache"
# Create a system user UID/GID=999
RUN useradd -r ${user}
# Allow to bind to privileged ports
RUN setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/frankenphp
# Install system dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
libfcgi-bin \
mariadb-client \
gpg \
supervisor \
# Unicode support for PDF
fonts-noto-cjk-extra \
fonts-wqy-microhei \
@@ -49,15 +40,14 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
gpg --dearmor -o /etc/apt/keyrings/google.gpg \
&& echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/google.gpg] https://dl.google.com/linux/chrome/deb/ stable main" > /etc/apt/sources.list.d/google-chrome.list \
&& apt-get update \
&& apt-get install -y --no-install-recommends google-chrome-stable \
&& mkdir /config/google-chrome \
&& chown ${user}: /config/google-chrome; \
&& apt-get install -y --no-install-recommends google-chrome-stable; \
elif [ "$(dpkg --print-architecture)" = "arm64" ]; then \
apt-get install -y --no-install-recommends \
chromium \
&& mkdir /config/chromium \
&& chown ${user}: /config/chromium; \
chromium; \
fi \
# Create config directory for chromium/google-chrome-stable
&& mkdir /var/www/.config \
&& chown www-data:www-data /var/www/.config \
# Cleanup
&& apt-get purge -y gpg \
&& apt-get autoremove -y \
@@ -65,38 +55,36 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
&& rm -rf /var/lib/apt/lists/*
# Install PHP extensions
COPY --from=ghcr.io/mlocati/php-extension-installer /usr/bin/install-php-extensions /usr/local/bin/
RUN install-php-extensions \
${php_require} \
${php_suggest} \
${php_extra}
# Configure PHP
RUN ln -s "${PHP_INI_DIR}/php.ini-production" "${PHP_INI_DIR}/php.ini"
RUN ln -s "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
COPY php/php.ini /usr/local/etc/php/conf.d/invoiceninja.ini
COPY php/php-fpm.conf /usr/local/etc/php-fpm.d/invoiceninja.conf
# Workaround: Disable SSL for mariadb-client for compatibility with MySQL
RUN echo "skip-ssl = true" >> /etc/mysql/mariadb.conf.d/50-client.cnf
# Create directory for artisan tinker (init.sh)
RUN mkdir /config/psysh \
&& chown ${user}: /config/psysh
# Setup supervisor
COPY supervisor/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
# Change owner for caddy directories
RUN chown -R ${user}: \
/data/caddy \
/config/caddy
# InvoiceNinja
COPY --from=prepare-app --chown=${user}:${user} /app /app
# Setup InvoiceNinja
COPY --from=prepare-app --chown=www-data:www-data /var/www/html /var/www/html
COPY --from=prepare-app --chown=www-data:www-data /tmp/public /tmp/public
# Add initialization script
COPY --chmod=0755 scripts/init.sh /usr/local/bin/init.sh
USER ${user}
HEALTHCHECK --start-period=100s CMD curl -f http://localhost/health
# Health check
HEALTHCHECK --start-period=100s \
CMD REMOTE_ADDR=127.0.0.1 REQUEST_URI=/health REQUEST_METHOD=GET SCRIPT_FILENAME=/var/www/html/public/index.php cgi-fcgi -bind -connect 127.0.0.1:9000 | grep '{"status":"ok","message":"API is healthy"}'
ENTRYPOINT ["/usr/local/bin/init.sh"]
CMD ["frankenphp", "php-cli", "artisan", "octane:frankenphp"]
CMD ["supervisord", "-c", "/etc/supervisor/supervisord.conf"]

72
debian/docker-compose.yml vendored Normal file
View File

@@ -0,0 +1,72 @@
services:
app:
build:
context: .
image: invoiceninja/invoiceninja-debian:${TAG:-latest}
restart: unless-stopped
env_file:
- ./.env
volumes:
# - ./php/php.ini:/usr/local/etc/php/conf.d/invoiceninja.ini:ro
# - ./php/php-fpm.conf:/usr/local/etc/php-fpm.d/invoiceninja.conf:ro
# - ./supervisor/supervisord.conf:/etc/supervisor/conf.d/supervisord.conf:ro
- app_public:/var/www/html/public
- app_storage:/var/www/html/storage
depends_on:
mysql:
condition: service_healthy
redis:
condition: service_healthy
nginx:
image: nginx:alpine
restart: unless-stopped
ports:
- "80:80"
volumes:
- ./nginx:/etc/nginx/conf.d:ro
- app_public:/var/www/html/public:ro
- app_storage:/var/www/html/storage:ro
depends_on:
app:
condition: service_healthy
mysql:
image: mysql:8
restart: unless-stopped
environment:
MYSQL_DATABASE: ${DB_DATABASE}
MYSQL_USER: ${DB_USERNAME}
MYSQL_PASSWORD: ${DB_PASSWORD}
MYSQL_ROOT_PASSWORD: ${DB_ROOT_PASSWORD}
volumes:
- mysql_data:/var/lib/mysql
healthcheck:
test:
[
"CMD",
"mysqladmin",
"ping",
"-h",
"localhost",
"-u${MYSQL_USER}",
"-p${MYSQL_PASSWORD}",
]
redis:
image: redis:alpine
restart: unless-stopped
volumes:
- redis_data:/data
healthcheck:
test: ["CMD", "redis-cli", "ping"]
volumes:
app_public:
driver: local
app_storage:
driver: local
mysql_data:
driver: local
redis_data:
driver: local

14
debian/nginx/invoiceninja.conf vendored Normal file
View File

@@ -0,0 +1,14 @@
# https://nginx.org/en/docs/http/ngx_http_core_module.html
client_max_body_size 10M;
client_body_buffer_size 10M;
server_tokens off;
# https://nginx.org/en/docs/http/ngx_http_fastcgi_module.html
fastcgi_buffers 32 16K;
# https://nginx.org/en/docs/http/ngx_http_gzip_module.html
gzip on;
gzip_comp_level 2;
gzip_min_length 1M;
gzip_proxied any;
gzip_types *;

32
debian/nginx/laravel.conf vendored Normal file
View File

@@ -0,0 +1,32 @@
# https://laravel.com/docs/master/deployment#nginx
server {
listen 80 default_server;
server_name _;
root /var/www/html/public;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";
index index.php;
charset utf-8;
location / {
try_files $uri $uri/ /index.php?$query_string;
}
location = /favicon.ico { access_log off; log_not_found off; }
location = /robots.txt { access_log off; log_not_found off; }
error_page 404 /index.php;
location ~ \.php$ {
fastcgi_pass app:9000;
fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
include fastcgi_params;
}
location ~ /\.(?!well-known).* {
deny all;
}
}

1
debian/php/php-fpm.conf vendored Normal file
View File

@@ -0,0 +1 @@
pm.max_children = 10

View File

@@ -2,6 +2,7 @@
; https://www.php.net/manual/en/ini.core.php
post_max_size=10M
upload_max_filesize=10M
memory_limit=512M
[opcache]
; https://www.php.net/manual/en/opcache.installation.php#opcache.installation.recommended
@@ -13,11 +14,11 @@ opcache.jit=tracing
opcache.jit_buffer_size=64M
[extra]
; https://frankenphp.dev/docs/performance/#php-performance
; http://symfony.com/doc/current/performance.html
opcache.memory_consumption=256
opcache.max_accelerated_files=20000
opcache.preload=/app/preload.php
opcache.preload=/var/www/html/preload.php
opcache.preload_user=www-data
opcache.validate_timestamps=0
realpath_cache_size = 4096K
realpath_cache_ttl = 600

71
debian/scripts/init.sh vendored Executable file
View File

@@ -0,0 +1,71 @@
#!/bin/sh -eu
# Set PDF generation browser path based on architecture
if [ "$(dpkg --print-architecture)" = "amd64" ]; then
export SNAPPDF_CHROMIUM_PATH=/usr/bin/google-chrome-stable
elif [ "$(dpkg --print-architecture)" = "arm64" ]; then
export SNAPPDF_CHROMIUM_PATH=/usr/bin/chromium
fi
if [ "$*" = 'supervisord -c /etc/supervisor/supervisord.conf' ]; then
# Check for required folders and create if needed
[ -d /var/www/html/public] || mkdir -p /var/www/html/public
[ -d /var/www/html/storage/app/public ] || mkdir -p /var/www/html/storage/app/public
[ -d /var/www/html/storage/framework/sessions ] || mkdir -p /var/www/html/storage/framework/sessions
[ -d /var/www/html/storage/framework/views ] || mkdir -p /var/www/html/storage/framework/views
[ -d /var/www/html/storage/framework/cache ] || mkdir -p /var/www/html/storage/framework/cache
# Workaround for application updates
if [ "$(ls -A /tmp/public)" ]; then
echo "Updating public folder..."
rm -rf /var/www/html/public/.htaccess \
/var/www/html/public/.well-known \
/var/www/html/public/*
cp -r /tmp/public/* \
/tmp/public/.htaccess \
/tmp/public/.well-known \
/var/www/html/public/ && \
rm -rf /tmp/public/*
fi
echo "Public Folder is up to date"
# Ensure owner, file and directory permissions are correct
chown -R www-data:www-data \
/var/www/html/public \
/var/www/html/storage
find /var/www/html/public \
/var/www/html/storage \
-type f -exec chmod 644 {} \;
find /var/www/html/public \
/var/www/html/storage \
-type d -exec chmod 755 {} \;
# Clear and cache config in production
if [ "$APP_ENV" = "production" ]; then
runuser -u www-data -- php artisan migrate --force
runuser -u www-data -- php artisan cache:clear # Clear after the migration
runuser -u www-data -- php artisan ninja:design-update
runuser -u www-data -- php artisan optimize
# If first IN run, it needs to be initialized
if [ "$(runuser -u www-data -- php artisan tinker --execute='echo Schema::hasTable("accounts") && !App\Models\Account::all()->first();')" = "1" ]; then
echo "Running initialization..."
runuser -u www-data -- php artisan db:seed --force
if [ -n "${IN_USER_EMAIL}" ] && [ -n "${IN_PASSWORD}" ]; then
runuser -u www-data -- php artisan ninja:create-account --email "${IN_USER_EMAIL}" --password "${IN_PASSWORD}"
else
echo "Initialization failed - Set IN_USER_EMAIL and IN_PASSWORD in .env"
exit 1
fi
fi
echo "Production setup completed"
fi
echo "Starting supervisord..."
fi
exec "$@"

39
debian/supervisor/supervisord.conf vendored Normal file
View File

@@ -0,0 +1,39 @@
[supervisord]
nodaemon=true
user=root
logfile=/dev/null
logfile_maxbytes=0
pidfile=/var/run/supervisord.pid
[program:php-fpm]
command=/usr/local/sbin/php-fpm -F
autostart=true
autorestart=true
priority=5
stdout_logfile=/dev/fd/1
stdout_logfile_maxbytes=0
redirect_stderr=true
[program:queue-worker]
process_name=%(program_name)s_%(process_num)02d
command=php /var/www/html/artisan queue:work --sleep=3 --tries=3 --max-time=3600 --verbose
autostart=true
autorestart=true
stopasgroup=true
killasgroup=true
user=www-data
numprocs=2
environment=HOME="/var/www"
stdout_logfile=/dev/fd/1
stdout_logfile_maxbytes=0
redirect_stderr=true
stopwaitsecs=3600
[program:scheduler]
command=php /var/www/html/artisan schedule:work --verbose
autostart=true
autorestart=true
user=www-data
stdout_logfile=/dev/fd/1
stdout_logfile_maxbytes=0
redirect_stderr=true

View File

@@ -1,129 +0,0 @@
# name: invoiceninja
x-app-volumes: &volumes
volumes:
- app_storage:/app/storage
- caddy_data:/data
services:
app:
build:
context: .
image: invoiceninja/invoiceninja-octane:${TAG:-latest}
restart: unless-stopped
# php artisan help octane:frankenphp
command: --port=80 --workers=2
# command: --host=example.com --port=443 --workers=2 --https --http-redirect --log-level=info
ports:
- "80:80" # HTTP
# - "443:443" # HTTPS
# - "443:443/udp" # HTTP/3, Works for chromium based browser, but causes H3_GENERAL_PROTOCOL_ERROR for pdf previews in Firefox
env_file:
- ./.env
environment:
LARAVEL_ROLE: app
<<: *volumes
depends_on:
mysql:
condition: service_healthy
redis:
condition: service_healthy
# mariadb:
# condition: service_healthy
# valkey:
# condition: service_healthy
app-worker:
image: invoiceninja/invoiceninja-octane:${TAG:-latest}
restart: unless-stopped
# php artisan help queue:work
command: --verbose --sleep=3 --tries=3 --max-time=3600
deploy:
mode: replicated
replicas: 2
env_file:
- ./.env
environment:
LARAVEL_ROLE: worker
<<: *volumes
healthcheck:
test: ["CMD", "pgrep", "-f", "queue:work"]
depends_on:
app:
condition: service_healthy
app-scheduler:
image: invoiceninja/invoiceninja-octane:${TAG:-latest}
restart: unless-stopped
# php artisan help schedule:work
command: --verbose
env_file:
- ./.env
environment:
LARAVEL_ROLE: scheduler
<<: *volumes
healthcheck:
test: ["CMD", "pgrep", "-f", "schedule:work"]
depends_on:
app:
condition: service_healthy
mysql:
image: mysql:8
restart: unless-stopped
environment:
MYSQL_DATABASE: ${DB_DATABASE}
MYSQL_USER: ${DB_USERNAME}
MYSQL_PASSWORD: ${DB_PASSWORD}
MYSQL_ROOT_PASSWORD: ${DB_ROOT_PASSWORD}
volumes:
- mysql_data:/var/lib/mysql
healthcheck:
test:
[
"CMD",
"mysqladmin",
"ping",
"-h",
"localhost",
"-u${MYSQL_USER}",
"-p${MYSQL_PASSWORD}",
]
redis:
image: redis:alpine
restart: unless-stopped
volumes:
- redis_data:/data
healthcheck:
test: ["CMD", "redis-cli", "ping"]
# mariadb:
# image: mariadb:11.8
# restart: unless-stopped
# environment:
# MARIADB_DATABASE: ${DB_DATABASE}
# MARIADB_USER: ${DB_USERNAME}
# MARIADB_PASSWORD: ${DB_PASSWORD}
# MARIADB_ROOT_PASSWORD: ${DB_ROOT_PASSWORD}
# volumes:
# - mariadb:/var/lib/mysql
# healthcheck:
# test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
# valkey:
# image: valkey/valkey:8
# restart: unless-stopped
# volumes:
# - valkey:/data
# healthcheck:
# test: [ "CMD", "valkey-cli", "ping" ]
volumes:
app_storage:
caddy_data:
mysql_data:
redis_data:
# mariadb:
# valkey:

View File

@@ -1,97 +0,0 @@
#!/bin/sh -eu
# Fallback to app
role=${LARAVEL_ROLE:-app}
# Set PDF generation browser path based on architecture
export SNAPPDF_CHROMIUM_PATH=/usr/bin/google-chrome-stable
if [ "$(dpkg --print-architecture)" = "arm64" ]; then
export SNAPPDF_CHROMIUM_PATH=/usr/bin/chromium
fi
# Check for default CMD, flag(s) or empty CMD
if [ "$*" = 'frankenphp php-cli artisan octane:frankenphp' ] || [ "${1#-}" != "$1" ] || [ "$#" -eq "0" ]; then
if [ "--help" = "$1" ]; then
echo [CMD]
echo "This image will execute specific CMDs based on the environment variable LARAVEL_ROLE"
echo
echo "LARAVEL_ROLE=app: frankenphp php-cli artisan octane:frankenphp (default)"
echo "LARAVEL_ROLE=worker: frankenphp php-cli artisan queue:work"
echo "LARAVEL_ROLE=scheduler: frankenphp php-cli artisan schedule:work"
echo
echo [FLAGS]
echo To the CMD defined by LARAVEL_ROLE can be extended with flags for artisan commands
echo
echo Available flags can be displaced:
echo docker run --rm invoiceninja/invoiceninja-debian frankenphp php-cli artisan help octane:frankenphp
echo docker run --rm invoiceninja/invoiceninja-debian frankenphp php-cli artisan queue:work
echo docker run --rm invoiceninja/invoiceninja-debian frankenphp php-cli artisan schedule:work
echo
echo Example:
echo docker run -e LARAVEL_ROLE=worker invoiceninja/invoiceninja-debian --verbose --sleep=3 --tries=3 --max-time=3600
echo
echo [Deployment]
echo Docker compose is recommended
echo
echo Example:
echo https://github.com/invoiceninja/dockerfiles/blob/octane/debian/docker-compose.yml
echo
exit 0
fi
# Run app
if [ "${role}" = "app" ]; then
cmd="frankenphp php-cli artisan octane:frankenphp"
# Check for required folders and create if needed, relevant for bind mounts
# It is not possible to chown, as we are not executing this script as root
[ -d /var/www/html/storage/app/public ] || mkdir -p /var/www/html/storage/app/public
[ -d /app/storage/framework/sessions ] || mkdir -p /app/storage/framework/sessions
[ -d /app/storage/framework/views ] || mkdir -p /app/storage/framework/views
[ -d /app/storage/framework/cache ] || mkdir -p /app/storage/framework/cache
[ -d /app/storage/logs ] || mkdir -p /app/storage/logs
if [ "$APP_ENV" = "production" ]; then
frankenphp php-cli artisan migrate --force
frankenphp php-cli artisan cache:clear # Clear after the migration
frankenphp php-cli artisan ninja:design-update
frankenphp php-cli artisan optimize
# If first IN run, it needs to be initialized
if [ "$(frankenphp php-cli artisan tinker --execute='echo Schema::hasTable("accounts") && !App\Models\Account::all()->first();')" = "1" ]; then
echo "Running initialization..."
frankenphp php-cli artisan db:seed --force
if [ -n "${IN_USER_EMAIL}" ] && [ -n "${IN_PASSWORD}" ]; then
frankenphp php-cli artisan ninja:create-account --email "${IN_USER_EMAIL}" --password "${IN_PASSWORD}"
else
echo "Initialization failed - Set IN_USER_EMAIL and IN_PASSWORD in .env"
exit 1
fi
fi
fi
echo "Production setup completed"
# Run worker
elif [ "${role}" = "worker" ]; then
cmd="frankenphp php-cli artisan queue:work"
# Run scheduler
elif [ "${role}" = "scheduler" ]; then
cmd="frankenphp php-cli artisan schedule:work"
# Invalid role
else
echo "Invalid role: ${role}"
exit 1
fi
# Append flag(s) to role cmd
if [ "${1#-}" != "$1" ]; then
set -- ${cmd} "$@"
else
set -- ${cmd}
fi
fi
exec "$@"