Create deployment action

Author: heiglandreas

.docker/nginx/Dockerfile

@@ -1,29 +1,15 @@
 server {
 
     # Set the port to listen on and the server name
-    listen 80;
-    listen [::]:80;
-    server_name php.ug php.ug.lo;
+    listen 80 default_server;
+    listen [::]:80 default_server;
+    server_name _;
 
-    return 301 https://$server_name$request_uri;
-}
-
-server {
-    listen [::]:443 ssl;
-    listen 443 ssl;
-    server_name php.ug php.ug.lo;
-    # Set the document root of the project
     root /var/www/php.ug/public;
 
     # Set the directory index files
     index index.html index.php;
 
-    ssl_certificate /etc/nginx/ssl/php.ug.lo.crt;
-    ssl_certificate_key /etc/nginx/ssl/php.ug.lo.key;
-
-    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
-    ssl_ciphers         HIGH:!aNULL:!MD5;
-
     # Specify the default character set
     charset utf-8;
 
@@ -58,7 +44,7 @@ server {
 
     sendfile off;
 
-    client_max_body_size 100m;
+    client_max_body_size 20m;
 
     # Specify what happens what .ht files are requested
     location ~ /\.ht {

.docker/nginx/default.conf

@@ -1,9 +1,15 @@
-FROM php:8.4-fpm
 LABEL authors="andreas@heigl.org"
+FROM php:8.4-fpm AS base
 
 COPY --from=ghcr.io/php/pie:bin /pie /usr/bin/pie
 COPY scripts /tmp
 RUN bash -c "/tmp/php-build.sh"
 RUN bash -c "/tmp/php-install-composer.sh"
 RUN bash -c "/tmp/php-install-phive.sh"
 WORKDIR "/var/www/php.ug"
+
+FROM base AS prod
+
+RUN rm /usr/bin/pie usr/local/bin/composer /usr/local/bin/phive
+COPY build /var/www/php.ug
+

.docker/nginx/ssl/ca.crt

@@ -0,0 +1,7 @@
+tests
+.justfiles
+.docker
+.editorconfig
+.gitattributes
+.gitignore
+Justfile

.docker/nginx/ssl/ca.key

@@ -0,0 +1,14 @@
+# Start the local instance
+[group("Build")]
+extract-php tag:
+	docker compose exec php bash -c <<- DELIMITER
+		rm -rf extract \
+		mkdir extract \
+		git archive --prefix=\"./\" --format=tar {{tag}} .| tar xv -C extract/ \
+		find extract/ -type f -exec sed -i \"s/%release-tag%/:{{tag}}/\" {} \; \
+		cd extract \
+		composer install --no-dev --prefer-dist -a \
+		cd .. \
+		tar cvzf archive.tgz -C extract/ . \
+		rm -rf extract \
+	DELIMITER

.docker/nginx/ssl/php.ug.lo.ext

@@ -2,6 +2,7 @@
 
 export COMPOSE_BAKE := "true"
 
+import '.justfiles/build.Justfile'
 import '.justfiles/docker.Justfile'
 import '.justfiles/init.Justfile'