mirror of
https://github.com/karatektus/pl_mail.git
synced 2026-10-25 10:04:18 +00:00
Paul LütznerandClaude Opus 5.5
a8364e34d2
The stack was nine long-running containers: the web server, the database, the Mercure hub, and six of plMail's own image, one per background process. It is three now: php, worker and database, with secrets-init still running once and exiting. The worker runs `app:work`, a small supervisor keeping seven processes alive the way Docker's restart policy kept seven containers alive: the IMAP supervisor, one consumer per queue, the scheduler and the hub. A clean exit (the hourly recycle, the restart signal) comes straight back; a crash backs off from one second to thirty. Output passes through a whole line at a time, so two processes' JSON records never interleave, and SIGTERM reaches every child at once with 25s to finish. Each queue keeps a process of its own, which is the part the split was for: a consumer inside a long handler cannot take a send. And each process keeps its container's old name as APP_CONTAINER_NAME, so heartbeats, /healthz and the log filters are unchanged. The hub is the official Mercure 1.x binary, copied into the image and run as one of those processes. Not FrankenPHP's built-in hub, which is 0.24 and refuses the RFC 9068 tokens plMail has minted since v0.2.31. The worker answers to `mercure` on the network, so the Caddyfile proxy and MERCURE_URL reach it where they reached the hub container, and older compose files keep working with this image unchanged. It is configured from the application's own settings, including MERCURE_COOKIE_NAME, so a plain-HTTP install names the cookie once for both halves. A 5s shutdown grace stops it waiting on open subscriptions, which made every stop take the whole 25s. The dev override loses its per-worker blocks, one of which (worker-bulk) had been missing, so that queue ran the published image's code in development. The demo overlay runs app:work --without=imap-supervisor. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
199 lines
8.2 KiB
Docker
199 lines
8.2 KiB
Docker
#syntax=docker/dockerfile:1
|
|
|
|
# Versions
|
|
FROM dunglas/frankenphp:1-php8.4 AS frankenphp_upstream
|
|
|
|
# The Mercure hub, taken as a binary rather than run as an image. plMail runs it
|
|
# as one of the background processes in the worker container (app:work), which
|
|
# answers to the name `mercure` on the stack's network: the web container
|
|
# proxies /.well-known/mercure there and the application publishes there, as
|
|
# they always did to a container of that name.
|
|
#
|
|
# Not the hub FrankenPHP has built in. That one is a release behind (0.24 in
|
|
# FrankenPHP 1.12), and plMail speaks the 1.0 protocol, whose RFC 9068 tokens a
|
|
# 0.x hub refuses. That exact mismatch, the other way round, stopped live
|
|
# updates in v0.2.31.
|
|
#
|
|
# `v1`, not an exact version: the hub keeps itself current within the protocol
|
|
# plMail speaks, the way the floating `dunglas/mercure` tag was meant to, but it
|
|
# now moves with plMail's own releases rather than whenever a host last pulled.
|
|
# A static Go binary, so an Alpine build runs on this Debian image as it is.
|
|
FROM docker.io/dunglas/mercure:v1 AS mercure_upstream
|
|
|
|
# The different stages of this Dockerfile are meant to be built into separate images
|
|
# https://docs.docker.com/develop/develop-images/multistage-build/#stop-at-a-specific-build-stage
|
|
# https://docs.docker.com/compose/compose-file/#target
|
|
|
|
|
|
# Base FrankenPHP image
|
|
FROM frankenphp_upstream AS frankenphp_base
|
|
|
|
WORKDIR /app
|
|
|
|
# NOTE: there is deliberately no `VOLUME /app/var/` here.
|
|
#
|
|
# It gave every container its own anonymous volume at /app/var, so attachments
|
|
# and raw messages written by the sync workers were invisible to the web
|
|
# container that serves them — downloads 404'd, and the data vanished on every
|
|
# container recreate. The durable paths are now bound explicitly per service
|
|
# (var/attachments, var/raw, var/uploads); see compose.override.yaml and
|
|
# truenas.compose.yaml. Re-adding this line silently breaks blob download again.
|
|
|
|
# persistent / runtime deps
|
|
# hadolint ignore=DL3008
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
acl \
|
|
file \
|
|
gettext \
|
|
git \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# pg_dump, for `app:backup`.
|
|
#
|
|
# From PGDG rather than Debian, and pinned to the same major as the server:
|
|
# pg_dump refuses outright to dump a server newer than itself, and Debian's
|
|
# postgresql-client trails 18 — so the distro package would install cleanly and
|
|
# then fail at the moment someone actually needed a backup.
|
|
#
|
|
# PGDG publishes amd64 and arm64, which the two-runner image build requires.
|
|
# hadolint ignore=DL3008
|
|
RUN set -eux; \
|
|
apt-get update; \
|
|
apt-get install -y --no-install-recommends curl ca-certificates gnupg; \
|
|
install -d /usr/share/postgresql-common/pgdg; \
|
|
curl -fsSL https://www.postgresql.org/media/keys/ACCC4CF8.asc \
|
|
-o /usr/share/postgresql-common/pgdg/apt.postgresql.org.asc; \
|
|
echo "deb [signed-by=/usr/share/postgresql-common/pgdg/apt.postgresql.org.asc] https://apt.postgresql.org/pub/repos/apt $(. /etc/os-release && echo "$VERSION_CODENAME")-pgdg main" \
|
|
> /etc/apt/sources.list.d/pgdg.list; \
|
|
apt-get update; \
|
|
apt-get install -y --no-install-recommends postgresql-client-18; \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN set -eux; \
|
|
install-php-extensions \
|
|
@composer \
|
|
apcu \
|
|
intl \
|
|
opcache \
|
|
zip \
|
|
pdo_pgsql \
|
|
pgsql \
|
|
pcntl \
|
|
gmp \
|
|
# Attachment previews only — see AttachmentThumbnailer, which degrades
|
|
# to the paperclip icon where this is missing.
|
|
gd \
|
|
;
|
|
|
|
# https://getcomposer.org/doc/03-cli.md#composer-allow-superuser
|
|
ENV COMPOSER_ALLOW_SUPERUSER=1
|
|
|
|
|
|
COPY --link frankenphp/conf.d/10-app.ini $PHP_INI_DIR/conf.d/
|
|
COPY --link --chmod=755 frankenphp/docker-entrypoint.sh /usr/local/bin/docker-entrypoint
|
|
# Its own binary, not just a step inside the entrypoint: the secrets-init
|
|
# service runs it on its own, before Postgres and Mercure start.
|
|
COPY --link --chmod=755 frankenphp/generate-secrets.sh /usr/local/bin/generate-secrets
|
|
COPY --link frankenphp/Caddyfile /etc/frankenphp/Caddyfile
|
|
# The hub and its own Caddyfile, verbatim: the image's default config (the one
|
|
# that requires a subscriber JWT), not the dev one. See mercure_upstream above.
|
|
COPY --link --from=mercure_upstream /usr/bin/caddy /usr/local/bin/mercure
|
|
COPY --link --from=mercure_upstream /etc/caddy/Caddyfile /etc/mercure/Caddyfile
|
|
|
|
ENTRYPOINT ["docker-entrypoint"]
|
|
|
|
# /healthz, not Caddy's metrics port. The old probe answered as soon as the web
|
|
# server was listening, which is true well before PHP can reach the database —
|
|
# so a stack with an unreachable database reported itself healthy, and
|
|
# `depends_on: service_healthy` waited for nothing worth waiting for.
|
|
#
|
|
# The app endpoint returns 503 when the database is down and 200 otherwise; see
|
|
# App\Controller\HealthController for why a backed-up queue deliberately stays
|
|
# 200. The worker services have no HTTP server and disable this in compose —
|
|
# their liveness reaches the same endpoint through heartbeats instead.
|
|
HEALTHCHECK --start-period=60s CMD curl -f http://localhost/healthz || exit 1
|
|
CMD [ "frankenphp", "run", "--config", "/etc/frankenphp/Caddyfile" ]
|
|
|
|
# Dev FrankenPHP image
|
|
FROM frankenphp_base AS frankenphp_dev
|
|
|
|
ENV APP_ENV=dev XDEBUG_MODE=off
|
|
ENV FRANKENPHP_WORKER_CONFIG=watch
|
|
|
|
RUN mv "$PHP_INI_DIR/php.ini-development" "$PHP_INI_DIR/php.ini"
|
|
|
|
RUN set -eux; \
|
|
install-php-extensions \
|
|
xdebug \
|
|
;
|
|
|
|
COPY --link frankenphp/conf.d/20-app.dev.ini $PHP_INI_DIR/conf.d/
|
|
|
|
CMD [ "frankenphp", "run", "--config", "/etc/frankenphp/Caddyfile", "--watch" ]
|
|
|
|
# Prod FrankenPHP image
|
|
FROM frankenphp_base AS frankenphp_prod
|
|
|
|
ENV APP_ENV=prod
|
|
ENV FRANKENPHP_CONFIG="import worker.Caddyfile"
|
|
|
|
RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
|
|
|
|
COPY --link frankenphp/conf.d/20-app.prod.ini $PHP_INI_DIR/conf.d/
|
|
COPY --link frankenphp/worker.Caddyfile /etc/frankenphp/worker.Caddyfile
|
|
|
|
# prevent the reinstallation of vendors at every changes in the source code
|
|
COPY --link composer.* symfony.* ./
|
|
RUN set -eux; \
|
|
composer install --no-cache --prefer-dist --no-dev --no-autoloader --no-scripts --no-progress
|
|
|
|
# Which build this is, for the admin panel to show.
|
|
#
|
|
# It has to arrive here as an argument, because the image has no history to ask:
|
|
# the source is copied in and .git stays behind. Left empty by a plain
|
|
# `docker build`, which is correct — an image nobody stamped honestly does not
|
|
# know what it is, and AppVersion says "development" rather than guessing.
|
|
# The release workflow passes both from the metadata action.
|
|
#
|
|
# BELOW THE VENDOR INSTALL, AND THAT IS THE WHOLE POINT OF WHERE IT SITS.
|
|
# These two lines were above it, which quietly defeated the line the comment
|
|
# four lines up promises: every layer after an ENV is keyed on that ENV's value,
|
|
# and APP_COMMIT is a different value on every single commit. So the vendor
|
|
# layer was never once reused — every build of every branch re-ran
|
|
# `composer install` and re-downloaded 111 packages, and the cache the workflow
|
|
# carefully scopes per architecture could only ever hit the layers ABOVE this
|
|
# point.
|
|
#
|
|
# It is a build-time cost and it was also a reliability one, which is how it was
|
|
# found: a step that runs on every build is a step that needs the network on
|
|
# every build, and `composer install` failing on a release is a release that
|
|
# does not ship until somebody presses a button. Moved down, the vendors are
|
|
# keyed on composer.lock alone — they change when the dependencies change, which
|
|
# is what the original comment always meant.
|
|
#
|
|
# It cannot move any further down: `composer dump-env prod` below snapshots the
|
|
# environment into .env.local.php, and these have to be in it by then.
|
|
ARG APP_VERSION=""
|
|
ARG APP_COMMIT=""
|
|
ENV APP_VERSION=$APP_VERSION
|
|
ENV APP_COMMIT=$APP_COMMIT
|
|
# Where this image is published, e.g. ghcr.io/karatektus/pl_mail: what Admin →
|
|
# Updates asks for newer builds. Stamped rather than hard-coded so a fork that
|
|
# publishes its own image checks its own. The same value on every build, so it
|
|
# costs the layer cache nothing.
|
|
ARG APP_IMAGE=""
|
|
ENV APP_IMAGE=$APP_IMAGE
|
|
|
|
# copy sources
|
|
COPY --link . ./
|
|
RUN rm -Rf frankenphp/
|
|
|
|
RUN set -eux; \
|
|
mkdir -p var/cache var/log; \
|
|
composer dump-autoload --classmap-authoritative --no-dev; \
|
|
composer dump-env prod; \
|
|
composer run-script --no-dev post-install-cmd; \
|
|
php bin/console tailwind:build --minify; \
|
|
php bin/console asset-map:compile; \
|
|
chmod +x bin/console; sync;
|