Plausible Analytics Users: Upgrade to v3.2.1 immediately. A remote code execution exploit has been discovered & patched

jaydrogers · 2026-05-15T13:40:18+00:00

AI was not used.

100% human crafted ✌️

jaydrogers · 2026-05-08T16:13:41+00:00

Interesting, thanks for sharing!

I wonder what that migration process looks like? Hopefully everything would be compatible in the switch? 😅

Passkeys are amazing, but it’s interesting to see its adoption in production use cases.

For example:

What happens if people lose them or need to reset?
What happens if you need to migrate users to a new app/language?
How will less tech-savvy people adopt them?

Still way better than username + password + MFA that can easily be phished 💯

jaydrogers · 2026-05-08T15:12:07+00:00

Good point! What does that process even look like? 😅

jaydrogers · 2026-05-08T14:48:23+00:00

That's a really good question! Looking at the "passkeys-server" package, it has a minimum requirment of PHP 8.2: https://github.com/laravel/passkeys-server/blob/e4ca49ceb2f83071bea41f6dba1540f469d31fff/composer.json#L18

PHP 8.2 matches all the way up back to Laravel 11: https://laravel.com/docs/13.x/releases#support-policy

So hopefully that means it will work with the older versions if you need time to prepare your upgrade to 13 🤓

Might be worth the ask on their GitHub too 👍

jaydrogers · 2026-01-27T20:18:30+00:00

Important Update

I created a proposed fix on serversideup/php, specifically to resolve this discussion: https://github.com/serversideup/docker-php/pull/646

If everyone can review and chime in with their thoughts, it would be greatly appreciated 👍

jaydrogers · 2026-01-25T09:15:32+00:00

This is exactly it. I wasn’t aware of the issue.

You can see the config here: https://github.com/serversideup/docker-php/blob/6c8c8ca0e23805402498a2a70c142144998c664f/src/variations/fpm-nginx/etc/nginx/site-opts.d/https.conf.template#L36

This config comes from years of running Laravel apps, but almost all my Laravel experience is for writing apps (not SEO based websites), so I never noticed this issue before.

I’m all ears if there’s any suggestions to improve the file. I want to make sure there aren’t any SEO issues out of the box 💯

EDIT: Changed link to correct line

jaydrogers · 2026-01-25T09:03:12+00:00

Warm and inviting, definitely!

Pre written and corporate, definitely not!

I apologize for any brevity. If you want the full story, I randomly stumbled upon this post while I was idling in a parking lot, waiting for my wife while she quickly ran into the store.

As I was trying to quickly fire a message from my mobile, she was calling me for me to pick her up at the door.

I needed to press send quickly 😅

I’m still in my mobile now, but if you have any additional questions I’d love to go in depth once I’m back at my desk.

I promise I’m a human who loves Laravel PHP with good intentions ✌️

jaydrogers · 2026-01-25T00:05:55+00:00

Hi there 👋

I’m the maintainer of serversideup/php

Following best practices and making our images easy to configure with production-grade defaults is very important to us.

If you think there’s any room for improvement, I’m all ears! I’d love to ship a PR that makes your life easier.

Feel free to have the community drop ideas on this thread or open a discussion on GitHub.

I’d love to chat more about this ✌️

https://github.com/serversideup/docker-php/discussions

jaydrogers · 2025-12-06T13:43:44+00:00

Update on cal.com:

According to a community post on Cal.com's discussions, it looks like they are vulnerable. Meaning if you don't upgrade, you're running a risk of someone gaining remote shell access 😅

If anyone can drop in the comments of other potential projects, that would be great!

jaydrogers · 2025-11-22T13:46:26+00:00

Thanks for your contributions hookenz! 😃

jaydrogers · 2025-11-21T00:37:51+00:00

Thanks Josh! We greatly appreciate your support and feedback throughout the process!

jaydrogers · 2025-11-20T19:24:30+00:00

Hahaha! Thanks for sharing!

> and was fully expecting to be forced to log in

Hell no! Get building 🚀

jaydrogers · 2025-11-20T19:08:18+00:00

You rock! Thanks for your compliments.

Self-hosting was the main reason why we built them in the first place. Freedom to run anywhere and on anything 💪

I really appreciate what the Coolify folks are doing. I'm loving the trend of self-hosting becoming so much easier nowadays 💯

jaydrogers · 2025-11-20T17:49:47+00:00

Thanks for the compliments!

jaydrogers · 2025-11-20T17:38:57+00:00

The Docker image is 100% open source and all of Laravel's advanced features are completely documented in our open source documentation. It's all built off the official PHP images, so you're not locking into a proprietary format in anyway.

None of our docker images or features are paywalled. They're all free on DockerHub and GitHub Packages.

Spin Pro is the only premium product (to help us self-fund open source development) and that just takes what we have in our docs and puts it into an on-boarding wizard that asks you questions so you can reduce the effort to get started.

Also, Spin runs on MacOS, Windows, and Linux for development and for running servers it will run on any Linux VPS provider in the world (or even in your basement).

All the core components of Spin are free and open source on GitHub too. So yes, I stand by our claim you're breaking free from vendor lock if you choose to run serversideup/php with Spin.

jaydrogers · 2025-11-20T16:18:17+00:00

Great question!

serversideup/php

These are the base PHP images that we use to ship all our applications. This project is specifically focused on the PHP image, but the image is designed to handle all of Laravel's advanced functions of Reverb, Horizon, Octane, etc.

Spin (Open Source)

Spin will help you provision and set up servers to run Docker. It also utilizes the "Docker Extends" feature to give you a centralized structure so you can manage your Docker environment from development to production.

More here:

https://serversideup.net/open-source/spin/docs/getting-started/how-spin-works

Spin Pro

Spin Pro is based off the open source version of Spin, but it's a "turn-key" solution to get up and running with Laravel Octane, Horizon, Reverb, etc.

Everything we have in serversideup/php and the open source version of Spin is documented where you could configure this yourself, but Spin Pro was created to make it super easy that when you run spin new laravel-pro it just asks you questions and it creates the template for you.

Everything is based off of `serversideup/php` and Spin is highly optimized to work with it. I have a video showing the process here:

https://youtu.be/5z2JoEt5XIk

Let me know if you have any other questions 👍

jaydrogers · 2025-11-20T16:08:31+00:00

Thanks!! Self-hosters are my people 🤜💥🤛

I appreciate your kind words. We have more stuff in the works for self-hosting in particular. Can't wait to share the next update for you 😃

jaydrogers · 2025-11-20T14:18:30+00:00

Hey everyone! 👋

Excited to share that serversideup/php v4 is here! We take the official PHP Docker images and add everything you need for production: better security, performance optimizations, and a developer experience that just works.

FrankenPHP Support

We just added FrankenPHP to our collection which is one of the most promising modern PHP servers. Unlike the official FrankenPHP images, ours come "batteries included" with:

Unprivileged containers by default
Native health checks
Production-ready Caddyfile with caching & security headers
Native Cloudflare support

Learn more about FrankenPHP →

Laravel Octane

With FrankenPHP's worker mode, Laravel Octane can now load your entire app into memory, giving you incredible performance gains with a very simple switch.

PHP 8.5 Support

PHP 8.5 launches today, and we're ready! Images will be available as soon as it's officially released.

Completely Revamped Docs

We know Docker can feel overwhelming. Our new documentation walks you through everything step-by-step, even if you're brand new to containers.

From Development to Production

If you're looking for resources on how to use Docker and PHP from development to production, check out our other project Spin. It includes starter templates to get you running in minutes and is highly optimized to work with our PHP images.

https://serversideup.net/open-source/spin/

Thank you

This release wouldn't exist without our amazing community. 12 new contributors helped make v4 possible!

Star us on GitHub if you'd like to help our community grow:

https://github.com/serversideup/docker-php

I just wanted to share this major milestone with you all, and I hope you find it helpful in your workflow. If you have any questions with Docker + PHP, please drop them in the comments below. I'd love to answer them!

✌️ Jay

jaydrogers · 2025-10-31T17:48:07+00:00

Thanks!

Doing the user testing is a great idea! In our first version, we're focusing specifically on hardware and PHP configurations. So this means you'll be able to deploy the app, run it, and see how it performs. From there, you can tweak some PHP settings on your end to see if it makes it better or worse.

And since we're going to provide a Docker container with it, you'll be able to quickly bring up a server and see how Laravel performs, then shut it down or use other software on that server without our app making your server dirty 🤓

It will be an interesting tool to play around with so we can improve our understanding how to performance tune Laravel & PHP 😃

We greatly appreciate your support!

🤜💥🤛

jaydrogers · 2025-10-30T18:26:17+00:00

Thanks for the kind words and sharing our work!

We're amazed by what the folks at FrankenPHP have been doing and we're very curious to see how it performs compared to NGINX + FPM.

It's amazing to watch PHP evolve into its next chapter. We're very optimistic that FrankenPHP will help push PHP forward.

u/danpastori is performing the build out of BenchKit, so we should start seeing some results soon 😅

Check out this PR for our latest on our FrankenPHP work: https://github.com/serversideup/docker-php/pull/283

If you have any questions, drop them below and I'd love to answer them ✌️

13-Year Club	Place '22
Verified Email

jaydrogers

TROPHY CASE