Dockerfile

FROM nginx:1.17.4-alpine

LABEL authors="Konstantin Goretzki, Felix Alexa"
LABEL version="v2.4"
LABEL description="This image contains a working Lychee installation which \
uses the nginx:1.17.4-alpine image. The base images provides alpine with nginx installed, \
we've added php7 and the lychee files. We've tried to do everything as small, secure and clean \
as possible, but if you find some spots which need to be improved, feel free to tell us."

# set timezone, version and hash of Lychee download
ARG TZ=Europe/Berlin
ARG LYCHEE_VERSION=v3.2.16
ARG LYCHEE_DOWNLOAD_SHA512=b24af37a6b320bdc5de97099a8622cd08ced730514a9e9227db17f5393214dc5145a11b1f05189722233f58075ebcb24b948a20e3ce2a7848b2925705b35e411


# prevent pipefail
SHELL ["/bin/ash", "-eo", "pipefail", "-c"]

# set timezone and install php7 and required php-modules
RUN \
    ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone \
    && apk update \
    && apk add --no-cache php7 \
          php7-fpm \
          php7-imagick \
          php7-mbstring \
          php7-exif \
          php7-gd \
          php7-mysqli \
          php7-json \
          php7-zip \
          php7-session \
          supervisor \
          imagemagick \
          ffmpeg \
          curl \
          composer

# change php.ini and php-fpm settings for Lychee
RUN \
  sed -i -e "s|max_execution_time = 30|max_execution_time = 200|g" /etc/php7/php.ini \
  && sed -i -e "s|post_max_size = 8M|post_max_size = 100M|g" /etc/php7/php.ini \
  && echo "upload_max_size = 100M" >> /etc/php7/php.ini \
  && sed -i -e "s|upload_max_filesize = 2M|upload_max_filesize = 150M|g" /etc/php7/php.ini \
  && sed -i -e "s|memory_limit = 128M|memory_limit = 256M|g" /etc/php7/php.ini \
  && sed -i "s|;listen.owner\s*=\s*nobody|listen.owner = nginx|g" /etc/php7/php-fpm.d/www.conf \
  && sed -i "s|;listen.group\s*=\s*nobody|listen.group = nginx|g" /etc/php7/php-fpm.d/www.conf \
  && sed -i "s|user\s*=\s*nobody|user = nginx|g" /etc/php7/php-fpm.d/www.conf \
  && sed -i "s|group\s*=\s*nobody|group = nginx|g" /etc/php7/php-fpm.d/www.conf

# remove default nginx files, download + verify Lychee files and copy them to the webroot
RUN \
  rm -r -- /usr/share/nginx/html/* \
  && cd /tmp/ \
  && curl -fSL -o lychee.zip "https://github.com/LycheeOrg/Lychee/releases/download/$LYCHEE_VERSION/Lychee-$LYCHEE_VERSION.zip" \
  && echo "$LYCHEE_DOWNLOAD_SHA512  lychee.zip" | sha512sum -c \
  && unzip lychee.zip \
  && cd Lychee-$LYCHEE_VERSION \
  && mv -- * .[!.]* /usr/share/nginx/html \ 
  && rm -rf -- /tmp/* 


# install dependencies for generating video thumbnails using composer
RUN \
  cd /usr/share/nginx/html/ \
  && composer install \
  && chown -R nginx:nginx /usr/share/nginx/html/* \
  && chmod -R 750 uploads/ data/

# fix weird path bug - GitHub #175 
RUN \
  sed -i 's#$ffmpeg = FFMpeg\\FFMpeg::create();#$ffmpeg = FFMpeg\\FFMpeg::create(array('"'"'ffmpeg.binaries'"'"'  => '"'"'/usr/bin/ffmpeg'"'"','"'"'ffprobe.binaries'"'"' => '"'"'/usr/bin/ffprobe'"'"',));#g' /usr/share/nginx/html/php/Modules/Photo.php \ 
  && sed -i 's#$ffprobe = FFMpeg\\FFProbe::create();#$ffprobe = FFMpeg\\FFProbe::create(array('"'"'ffmpeg.binaries'"'"'  => '"'"'/usr/bin/ffmpeg'"'"','"'"'ffprobe.binaries'"'"' => '"'"'/usr/bin/ffprobe'"'"',));#g' /usr/share/nginx/html/php/Modules/Photo.php

# copy nginx and supervisor config-files
COPY src/nginx.conf /etc/nginx/nginx.conf
COPY src/supervisord.conf /etc/supervisord.conf

# expose port
EXPOSE 80

STOPSIGNAL SIGTERM

# volumes
VOLUME /usr/share/nginx/html/uploads /usr/share/nginx/html/data

# start supervisord which manages the nginx and php-fpm processes
CMD ["/usr/bin/supervisord", "-n", "-c", "/etc/supervisord.conf"]