Deploy Statamic with Docker

[LexanRed]

Dear fellow developers,

I am trying to dockerize my Statamic application. We use a nginx reverse proxy with certbot to provide SSL certificates and routing.

The goal is, to simply build an image which hosts Statamic for production.

I tried a lot of different setups the last days, it kind of works. Serving content works. Uploading images for example, does not.
A 500 error is shown.

Does anyone have a working Dockerfile using PHP8 or could help me to find my issues?

Here is my Dockerfile

FROM php:8.0-fpm-alpine

# Execute as root user to create image
USER root

# Install packages and remove default server definition
RUN apk --no-cache add \
  nginx \
  nodejs \
  npm \
  supervisor

# Install composer
RUN wget https://getcomposer.org/composer-stable.phar -O /usr/local/bin/composer && chmod +x /usr/local/bin/composer

# Create symlink so programs depending on `php` still function
#RUN ln -s /usr/bin/php8 /usr/bin/php

# Configure nginx
COPY docker/nginx.conf /etc/nginx/nginx.conf

# Configure PHP-FPM
COPY docker/fpm-pool.conf /usr/local/etc/php/php-fpm.d/www.conf
COPY docker/php.ini /usr/local/etc/php/conf.d/php.ini

# Configure supervisord
COPY docker/supervisord.conf /etc/supervisor/conf.d/supervisord.conf

# Setup document root
RUN mkdir -p /var/www/html

# Add application
WORKDIR /var/www/html
COPY --chown=nobody . .

# Make sure files/folders needed by the processes are accessable when they run under the nobody user
RUN chown -R nobody.nobody /var/www/html && \
  chown -R nobody.nobody /run && \
  chown -R nobody.nobody /var/lib/nginx && \
  chown -R nobody.nobody /var/log/nginx

# Install dependencies
RUN composer install --optimize-autoloader --no-dev
RUN npm install
RUN npm run-script production

# Switch to use a non-root user from here on
USER nobody

# Expose the port nginx is reachable on
EXPOSE 80

# Let supervisord start nginx & php-fpm
CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]

# Configure a healthcheck to validate that everything is up&running
# HEALTHCHECK --timeout=10s CMD curl --silent --fail http://127.0.0.1:80/fpm-ping

My nginx.conf

worker_processes auto;
error_log stderr warn;
pid /run/nginx.pid;

events {
    worker_connections 1024;
}

http {
    include mime.types;
    default_type application/octet-stream;

    # Define custom log format to include reponse times
    log_format main_timed '$remote_addr - $remote_user [$time_local] "$request" '
                          '$status $body_bytes_sent "$http_referer" '
                          '"$http_user_agent" "$http_x_forwarded_for" '
                          '$request_time $upstream_response_time $pipe $upstream_cache_status';

    access_log /dev/stdout main_timed;
    error_log /dev/stderr notice;

    keepalive_timeout 65;

    # Write temporary files to /tmp so they can be created as a non-privileged user
    client_body_temp_path /tmp/client_temp;
    proxy_temp_path /tmp/proxy_temp_path;
    fastcgi_temp_path /tmp/fastcgi_temp;
    uwsgi_temp_path /tmp/uwsgi_temp;
    scgi_temp_path /tmp/scgi_temp;

    gzip on;
    gzip_proxied any;
    gzip_types text/plain application/xml text/css text/js text/xml application/x-javascript text/javascript application/json application/xml+rss;
    gzip_vary on;
    gzip_disable "msie6";

    # Include server configs
    include /etc/nginx/conf.d/*.conf;
}

My additional server config:

server {
    listen 80;
    root /var/www/html/public;

    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-Content-Type-Options "nosniff";

    index index.php index.html;
    charset utf-8;

    location = /favicon.ico { access_log off; log_not_found off; }
    location = /robots.txt  { access_log off; log_not_found off; }

    error_page 404 /index.php;

    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        fastcgi_buffering off;
    }

    location / {
        try_files $uri $uri/ /index.php?$query_string;
        gzip_static on;
	}

    location ~ /\.(?!well-known).* {
        deny all;
    }
}

Do I miss any dependencies or is the problem something else?

This error occurs, when uploading a picture:

MyApp  | 2021/11/26 09:59:27 [warn] 10#10: *1 a client request body is buffered to a temporary file /tmp/client_temp/0000000001, client: 192.168.240.1, server: , request: "POST /cp/assets HTTP/1.1", host: "localhost", referrer: "http://localhost/cp/collections/pages/entries/home/home"
MyApp  | 192.168.240.1 - - [26/Nov/2021:09:59:27 +0000] "POST /cp/assets HTTP/1.1" 500 44 "http://localhost/cp/collections/pages/entries/home/home" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" "-" 0.188 0.168 . -
MyApp  | 127.0.0.1 -  26/Nov/2021:09:59:27 +0000 "POST /index.php" 500

I could not make it work to actually see the error, which is behind this nginx output.
If anyone has a hint on that too, would be great!

Thank you all a lot!

[edalzell]

https://statamic.dev/installing/docker

[LexanRed]

Laravel Sail is a development environment and not meant to be used in production.

[jasonvarga]

Is anything written to the log file in storage/logs?