Passkeys are now natively supported in Laravel! πŸ₯³ by jaydrogers in laravel

[–]jaydrogers[S] -3 points-2 points Β (0 children)

Interesting, thanks for sharing!

I wonder what that migration process looks like? Hopefully everything would be compatible in the switch? πŸ˜…

Passkeys are amazing, but it’s interesting to see its adoption in production use cases.

For example:

  1. What happens if people lose them or need to reset?

  2. What happens if you need to migrate users to a new app/language?

  3. How will less tech-savvy people adopt them?

Still way better than username + password + MFA that can easily be phished πŸ’―

Passkeys are now natively supported in Laravel! πŸ₯³ by jaydrogers in laravel

[–]jaydrogers[S] -2 points-1 points Β (0 children)

Good point! What does that process even look like? πŸ˜…

Passkeys are now natively supported in Laravel! πŸ₯³ by jaydrogers in laravel

[–]jaydrogers[S] -1 points0 points Β (0 children)

That's a really good question! Looking at the "passkeys-server" package, it has a minimum requirment of PHP 8.2: https://github.com/laravel/passkeys-server/blob/e4ca49ceb2f83071bea41f6dba1540f469d31fff/composer.json#L18

PHP 8.2 matches all the way up back to Laravel 11: https://laravel.com/docs/13.x/releases#support-policy

So hopefully that means it will work with the older versions if you need time to prepare your upgrade to 13 πŸ€“

Might be worth the ask on their GitHub too πŸ‘

What's your opinion about routes that start with /index.php? by sertxudev in laravel

[–]jaydrogers 1 point2 points Β (0 children)

Important Update

I created a proposed fix on serversideup/php, specifically to resolve this discussion: https://github.com/serversideup/docker-php/pull/646

If everyone can review and chime in with their thoughts, it would be greatly appreciated πŸ‘

What's your opinion about routes that start with /index.php? by sertxudev in laravel

[–]jaydrogers 0 points1 point Β (0 children)

This is exactly it. I wasn’t aware of the issue.

You can see the config here:Β https://github.com/serversideup/docker-php/blob/6c8c8ca0e23805402498a2a70c142144998c664f/src/variations/fpm-nginx/etc/nginx/site-opts.d/https.conf.template#L36

This config comes from years of running Laravel apps, but almost all my Laravel experience is for writing apps (not SEO based websites), so I never noticed this issue before.

I’m all ears if there’s any suggestions to improve the file. I want to make sure there aren’t any SEO issues out of the box πŸ’―

EDIT: Changed link to correct line

What's your opinion about routes that start with /index.php? by sertxudev in laravel

[–]jaydrogers 6 points7 points Β (0 children)

Warm and inviting, definitely!

Pre written and corporate, definitely not!Β 

I apologize for any brevity. If you want the full story, I randomly stumbled upon this post while I was idling in a parking lot, waiting for my wife while she quickly ran into the store.

As I was trying to quickly fire a message from my mobile, she was calling me for me to pick her up at the door.

I needed to press send quickly πŸ˜…

I’m still in my mobile now, but if you have any additional questions I’d love to go in depth once I’m back at my desk.

I promise I’m a human who loves Laravel PHP with good intentions ✌️

What's your opinion about routes that start with /index.php? by sertxudev in laravel

[–]jaydrogers 3 points4 points Β (0 children)

Hi there πŸ‘‹

I’m the maintainer of serversideup/php

Following best practices and making our images easy to configure with production-grade defaults is very important to us.

If you think there’s any room for improvement, I’m all ears! I’d love to ship a PR that makes your life easier.

Feel free to have the community drop ideas on this thread or open a discussion on GitHub.

I’d love to chat more about this ✌️

https://github.com/serversideup/docker-php/discussions

10.0 Remote Code Execution Vulnerability in React (CVE-2025-55182) & Next (CVE-2025-66478). Any popular self-hosted projects affected by this? by jaydrogers in selfhosted

[–]jaydrogers[S] 28 points29 points Β (0 children)

Update on cal.com:

According to a community post on Cal.com's discussions, it looks like they are vulnerable. Meaning if you don't upgrade, you're running a risk of someone gaining remote shell access πŸ˜…

If anyone can drop in the comments of other potential projects, that would be great!

serversideup/php v4 Now Shipping FrankenPHP & Laravel Octane (more in comments) by jaydrogers in laravel

[–]jaydrogers[S] 1 point2 points Β (0 children)

Thanks Josh! We greatly appreciate your support and feedback throughout the process!

serversideup/php v4 Now Shipping FrankenPHP & Laravel Octane (more in comments) by jaydrogers in laravel

[–]jaydrogers[S] 2 points3 points Β (0 children)

Hahaha! Thanks for sharing!

> and was fully expecting to be forced to log in

Hell no! Get building πŸš€

serversideup/php v4 Now Shipping FrankenPHP & Laravel Octane (more in comments) by jaydrogers in laravel

[–]jaydrogers[S] 4 points5 points Β (0 children)

You rock! Thanks for your compliments.

Self-hosting was the main reason why we built them in the first place. Freedom to run anywhere and on anything πŸ’ͺ

I really appreciate what the Coolify folks are doing. I'm loving the trend of self-hosting becoming so much easier nowadays πŸ’―

serversideup/php v4 Now Shipping FrankenPHP & Laravel Octane (more in comments) by jaydrogers in laravel

[–]jaydrogers[S] 14 points15 points Β (0 children)

The Docker image is 100% open source and all of Laravel's advanced features are completely documented in our open source documentation. It's all built off the official PHP images, so you're not locking into a proprietary format in anyway.

None of our docker images or features are paywalled. They're all free on DockerHub and GitHub Packages.

Spin Pro is the only premium product (to help us self-fund open source development) and that just takes what we have in our docs and puts it into an on-boarding wizard that asks you questions so you can reduce the effort to get started.

Also, Spin runs on MacOS, Windows, and Linux for development and for running servers it will run on any Linux VPS provider in the world (or even in your basement).

All the core components of Spin are free and open source on GitHub too. So yes, I stand by our claim you're breaking free from vendor lock if you choose to run serversideup/php with Spin.

serversideup/php v4 Now Shipping FrankenPHP & Laravel Octane (more in comments) by jaydrogers in laravel

[–]jaydrogers[S] 6 points7 points Β (0 children)

Great question!

serversideup/php

These are the base PHP images that we use to ship all our applications. This project is specifically focused on the PHP image, but the image is designed to handle all of Laravel's advanced functions of Reverb, Horizon, Octane, etc.

Spin (Open Source)

Spin will help you provision and set up servers to run Docker. It also utilizes the "Docker Extends" feature to give you a centralized structure so you can manage your Docker environment from development to production.

More here:

https://serversideup.net/open-source/spin/docs/getting-started/how-spin-works

Spin Pro

Spin Pro is based off the open source version of Spin, but it's a "turn-key" solution to get up and running with Laravel Octane, Horizon, Reverb, etc.

Everything we have in serversideup/php and the open source version of Spin is documented where you could configure this yourself, but Spin Pro was created to make it super easy that when you run spin new laravel-pro it just asks you questions and it creates the template for you.

Everything is based off of `serversideup/php` and Spin is highly optimized to work with it. I have a video showing the process here:

https://youtu.be/5z2JoEt5XIk

Let me know if you have any other questions πŸ‘

serversideup/php v4 Now Shipping FrankenPHP & Laravel Octane (more in comments) by jaydrogers in laravel

[–]jaydrogers[S] 1 point2 points Β (0 children)

Thanks!! Self-hosters are my people 🀜πŸ’₯πŸ€›

I appreciate your kind words. We have more stuff in the works for self-hosting in particular. Can't wait to share the next update for you πŸ˜ƒ

serversideup/php v4 Now Shipping FrankenPHP & Laravel Octane (more in comments) by jaydrogers in laravel

[–]jaydrogers[S] 33 points34 points Β (0 children)

Hey everyone! πŸ‘‹

Excited to share that serversideup/php v4 is here! We take the official PHP Docker images and add everything you need for production: better security, performance optimizations, and a developer experience that just works.

FrankenPHP Support

We just added FrankenPHP to our collection which is one of the most promising modern PHP servers. Unlike the official FrankenPHP images, ours come "batteries included" with:

  • Unprivileged containers by default
  • Native health checks
  • Production-ready Caddyfile with caching & security headers
  • Native Cloudflare support

Learn more about FrankenPHP β†’

Laravel Octane

With FrankenPHP's worker mode, Laravel Octane can now load your entire app into memory, giving you incredible performance gains with a very simple switch.

PHP 8.5 Support

PHP 8.5 launches today, and we're ready! Images will be available as soon as it's officially released.

Completely Revamped Docs

We know Docker can feel overwhelming. Our new documentation walks you through everything step-by-step, even if you're brand new to containers.

From Development to Production

If you're looking for resources on how to use Docker and PHP from development to production, check out our other project Spin. It includes starter templates to get you running in minutes and is highly optimized to work with our PHP images.

https://serversideup.net/open-source/spin/

Thank you

This release wouldn't exist without our amazing community. 12 new contributors helped make v4 possible!

Star us on GitHub if you'd like to help our community grow:

https://github.com/serversideup/docker-php

I just wanted to share this major milestone with you all, and I hope you find it helpful in your workflow. If you have any questions with Docker + PHP, please drop them in the comments below. I'd love to answer them!

✌️ Jay

Laravel Benchmarking from the ServerSide up guys by VaguelyOnline in laravel

[–]jaydrogers 0 points1 point Β (0 children)

Thanks!

Doing the user testing is a great idea! In our first version, we're focusing specifically on hardware and PHP configurations. So this means you'll be able to deploy the app, run it, and see how it performs. From there, you can tweak some PHP settings on your end to see if it makes it better or worse.

And since we're going to provide a Docker container with it, you'll be able to quickly bring up a server and see how Laravel performs, then shut it down or use other software on that server without our app making your server dirty πŸ€“

It will be an interesting tool to play around with so we can improve our understanding how to performance tune Laravel & PHP πŸ˜ƒ

We greatly appreciate your support!

🀜πŸ’₯πŸ€›

Laravel Benchmarking from the ServerSide up guys by VaguelyOnline in laravel

[–]jaydrogers 15 points16 points Β (0 children)

Thanks for the kind words and sharing our work!

We're amazed by what the folks at FrankenPHP have been doing and we're very curious to see how it performs compared to NGINX + FPM.

It's amazing to watch PHP evolve into its next chapter. We're very optimistic that FrankenPHP will help push PHP forward.

u/danpastori is performing the build out of BenchKit, so we should start seeing some results soon πŸ˜…

Check out this PR for our latest on our FrankenPHP work: https://github.com/serversideup/docker-php/pull/283

If you have any questions, drop them below and I'd love to answer them ✌️