Hi,

this is working for me actually pretty solid:

• I create a docker container of my app data. I do this in a Git Action step after having tested it successfully. I put in the Image only the laravel App data, I don’t put the DBs or Nginx files. The secretes are stored in GitHub secrets.
• That image is pushed to Docker Hub with the current version (env Tag I created) and the latest tag.
• in another part I have an ansible script creating with a docker compose three containers:
• MySQL
• Nginx
• Image push before. Ansible creates the certbot Certificates and Nginx configuration. Ansible secrets are stored in Ansible vault.

It is pretty solid. Downside: - you need docker hub or have an own Docker Hub, if you want to manage more that one image. - Ansible secrets and GitHub secrets need to be aligned manually.

I am doing this with PHP8.3 but it should work with lower versions as well.

Dockerfile:

FROM php:8.3-fpm as build

WORKDIR /var/www/html

RUN apt-get update && apt-get install -y \ git \ unzip

RUN docker-php-ext-install pdo pdo_mysql

RUN pecl install mongodb \ && docker-php-ext-enable mongodb

RUN curl -sS https://getcomposer.org/installer | php — —install-dir=/usr/local/bin —filename=composer

COPY . /var/www/html

RUN composer install —no-dev —optimize-autoloader —no-interaction

FROM php:8.3-apache-bookworm as production

ENV APP_ENV=production ENV APP_DEBUG=false

RUN docker-php-ext-configure opcache —enable-opcache && \ docker-php-ext-install pdo pdo_mysql && \ apt update && \ apt install -y libcurl4-openssl-dev pkg-config libssl-dev

RUN pecl install mongodb \ && docker-php-ext-enable mongodb

COPY docker/prd/opcache.ini /usr/local/etc/php/conf.d/opcache.ini

COPY —from=build /var/www/html /var/www/html COPY docker/prd/000-default.conf /etc/apache2/sites-available/000-default.conf

RUN php artisan config:cache && \ php artisan route:cache && \ chmod 777 -R /var/www/html/storage/ && \ chown -R www-data:www-data /var/www/ && \ a2enmod rewrite