# debian.sh --arch 'amd64' out/ 'trixie' '@1763337600'

RUN /bin/sh -c set -eux; { echo 'Package: php*'; echo 'Pin: release *'; echo 'Pin-Priority: -1'; } > /etc/apt/preferences.d/no-debian-php # buildkit

ENV PHPIZE_DEPS=autoconf dpkg-dev file g++ gcc libc-dev make pkg-config re2c

RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends $PHPIZE_DEPS ca-certificates curl xz-utils ; apt-get dist-clean # buildkit

ENV PHP_INI_DIR=/usr/local/etc/php

RUN /bin/sh -c set -eux; mkdir -p "$PHP_INI_DIR/conf.d"; [ ! -d /var/www/html ]; mkdir -p /var/www/html; chown www-data:www-data /var/www/html; chmod 1777 /var/www/html # buildkit

ENV PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64

ENV PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64

ENV PHP_LDFLAGS=-Wl,-O1 -pie

ENV GPG_KEYS=1198C0117593497A5EC5C199286AF1F9897469DC 49D9AF6BC72A80D6691719C8AA23F5BE9C7097D4 D95C03BC702BE9515344AE3374E44BC9067701A5

ENV PHP_VERSION=8.5.0

ENV PHP_URL=https://www.php.net/distributions/php-8.5.0.tar.xz PHP_ASC_URL=https://www.php.net/distributions/php-8.5.0.tar.xz.asc

ENV PHP_SHA256=39cb6e4acd679b574d3d3276f148213e935fc25f90403eb84fb1b836a806ef1e

RUN /bin/sh -c set -eux; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends gnupg; apt-get dist-clean; mkdir -p /usr/src; cd /usr/src; curl -fsSL -o php.tar.xz "$PHP_URL"; if [ -n "$PHP_SHA256" ]; then echo "$PHP_SHA256 *php.tar.xz" | sha256sum -c -; fi; curl -fsSL -o php.tar.xz.asc "$PHP_ASC_URL"; export GNUPGHOME="$(mktemp -d)"; for key in $GPG_KEYS; do gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; done; gpg --batch --verify php.tar.xz.asc php.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME"; apt-mark auto '.*' > /dev/null; apt-mark manual $savedAptMark > /dev/null; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false # buildkit

COPY docker-php-source /usr/local/bin/ # buildkit

RUN /bin/sh -c set -eux; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends libargon2-dev libcurl4-openssl-dev libonig-dev libreadline-dev libsodium-dev libsqlite3-dev libssl-dev libxml2-dev zlib1g-dev ; export CFLAGS="$PHP_CFLAGS" CPPFLAGS="$PHP_CPPFLAGS" LDFLAGS="$PHP_LDFLAGS" PHP_BUILD_PROVIDER='https://github.com/docker-library/php' PHP_UNAME='Linux - Docker' ; docker-php-source extract; cd /usr/src/php; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; debMultiarch="$(dpkg-architecture --query DEB_BUILD_MULTIARCH)"; if [ ! -d /usr/include/curl ]; then ln -sT "/usr/include/$debMultiarch/curl" /usr/local/include/curl; fi; ./configure --build="$gnuArch" --with-config-file-path="$PHP_INI_DIR" --with-config-file-scan-dir="$PHP_INI_DIR/conf.d" --enable-option-checking=fatal --with-mhash --with-pic --enable-mbstring --enable-mysqlnd --with-password-argon2 --with-sodium=shared --with-pdo-sqlite=/usr --with-sqlite3=/usr --with-curl --with-iconv --with-openssl --with-readline --with-zlib --disable-phpdbg --with-pear --with-libdir="lib/$debMultiarch" --disable-cgi --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data ; make -j "$(nproc)"; find -type f -name '*.a' -delete; make install; find /usr/local -type f -perm '/0111' -exec sh -euxc ' strip --strip-all "$@" || : ' -- '{}' + ; make clean; cp -v php.ini-* "$PHP_INI_DIR/"; cd /; docker-php-source delete; apt-mark auto '.*' > /dev/null; [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark; find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' | sort -u | xargs -rt dpkg-query --search | awk 'sub(":$", "", $1) { print $1 }' | sort -u | xargs -r apt-mark manual ; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; apt-get dist-clean; pecl update-channels; rm -rf /tmp/pear ~/.pearrc; php --version # buildkit

COPY docker-php-ext-* docker-php-entrypoint /usr/local/bin/ # buildkit

RUN /bin/sh -c docker-php-ext-enable sodium # buildkit

ENTRYPOINT ["docker-php-entrypoint"]

WORKDIR /var/www/html

RUN /bin/sh -c set -eux; cd /usr/local/etc; if [ -d php-fpm.d ]; then sed 's!=NONE/!=!g' php-fpm.conf.default | tee php-fpm.conf > /dev/null; cp php-fpm.d/www.conf.default php-fpm.d/www.conf; else mkdir php-fpm.d; cp php-fpm.conf.default php-fpm.d/www.conf; { echo '[global]'; echo 'include=etc/php-fpm.d/*.conf'; } | tee php-fpm.conf; fi; { echo '[global]'; echo 'error_log = /proc/self/fd/2'; echo; echo '; https://github.com/docker-library/php/pull/725#issuecomment-443540114'; echo 'log_limit = 8192'; echo; echo '[www]'; echo '; php-fpm closes STDOUT on startup, so sending logs to /proc/self/fd/1 does not work.'; echo '; https://bugs.php.net/bug.php?id=73886'; echo 'access.log = /proc/self/fd/2'; echo; echo 'clear_env = no'; echo; echo '; Ensure worker stdout and stderr are sent to the main error log.'; echo 'catch_workers_output = yes'; echo 'decorate_workers_output = no'; } | tee php-fpm.d/docker.conf; { echo '[global]'; echo 'daemonize = no'; echo; echo '[www]'; echo 'listen = 9000'; } | tee php-fpm.d/zz-docker.conf; mkdir -p "$PHP_INI_DIR/conf.d"; { echo '; https://github.com/docker-library/php/issues/878#issuecomment-938595965'; echo 'fastcgi.logging = Off'; } > "$PHP_INI_DIR/conf.d/docker-fpm.ini" # buildkit

STOPSIGNAL SIGQUIT

EXPOSE map[9000/tcp:{}]

CMD ["php-fpm"]

ARG DEPENDENCY_PACKAGES_ALPINE=fcgi gettext shadow

ARG DEPENDENCY_PACKAGES_DEBIAN=libfcgi-bin gettext-base procps zip

ARG DEPENDENCY_PHP_EXTENSIONS=opcache pcntl pdo_mysql pdo_pgsql redis zip

ARG REPOSITORY_BUILD_VERSION=v4.2.1-19679516649

ARG NGINX_VERSION=1.28.0-1~trixie

LABEL org.opencontainers.image.title=serversideup/php (fpm-nginx) org.opencontainers.image.description=Supercharge your PHP experience. Based off the official PHP images, serversideup/php includes pre-configured PHP extensions and settings for enhanced performance and security. Optimized for Laravel and WordPress. org.opencontainers.image.url=https://serversideup.net/open-source/docker-php/ org.opencontainers.image.source=https://github.com/serversideup/docker-php org.opencontainers.image.documentation=https://serversideup.net/open-source/docker-php/docs/ org.opencontainers.image.vendor=ServerSideUp org.opencontainers.image.authors=Jay Rogers (@jaydrogers) org.opencontainers.image.version=v4.2.1-19679516649 org.opencontainers.image.licenses=GPL-3.0-or-later

ENV APP_BASE_DIR=/var/www/html COMPOSER_ALLOW_SUPERUSER=1 COMPOSER_HOME=/composer COMPOSER_MAX_PARALLEL_HTTP=24 DISABLE_DEFAULT_CONFIG=false LOG_OUTPUT_LEVEL=warn HEALTHCHECK_PATH=/healthcheck NGINX_ACCESS_LOG=/dev/stdout NGINX_ERROR_LOG=/dev/stderr NGINX_FASTCGI_BUFFERS=8 8k NGINX_FASTCGI_BUFFER_SIZE=8k NGINX_HTTP_PORT=8080 NGINX_HTTPS_PORT=8443 NGINX_LISTEN_IP_PROTOCOL=all NGINX_SERVER_TOKENS=off NGINX_WEBROOT=/var/www/html/public NGINX_CLIENT_MAX_BODY_SIZE=100M PHP_DATE_TIMEZONE=UTC PHP_DISPLAY_ERRORS=Off PHP_DISPLAY_STARTUP_ERRORS=Off PHP_ERROR_LOG=/dev/stderr PHP_ERROR_REPORTING=22527 PHP_FPM_PM_CONTROL=ondemand PHP_FPM_PM_MAX_CHILDREN=20 PHP_FPM_PM_MAX_REQUESTS=0 PHP_FPM_PM_MAX_SPARE_SERVERS=3 PHP_FPM_PM_MIN_SPARE_SERVERS=1 PHP_FPM_PM_START_SERVERS=2 PHP_FPM_PM_STATUS_PATH=/status PHP_FPM_POOL_NAME=www PHP_FPM_PROCESS_CONTROL_TIMEOUT=10s PHP_MAX_EXECUTION_TIME=99 PHP_MAX_INPUT_TIME=-1 PHP_MAX_INPUT_VARS=1000 PHP_MEMORY_LIMIT=256M PHP_OPCACHE_ENABLE=0 PHP_OPCACHE_ENABLE_FILE_OVERRIDE=0 PHP_OPCACHE_FORCE_RESTART_TIMEOUT=180 PHP_OPCACHE_INTERNED_STRINGS_BUFFER=8 PHP_OPCACHE_JIT=off PHP_OPCACHE_JIT_BUFFER_SIZE=0 PHP_OPCACHE_MAX_ACCELERATED_FILES=10000 PHP_OPCACHE_MEMORY_CONSUMPTION=128 PHP_OPCACHE_REVALIDATE_FREQ=2 PHP_OPCACHE_SAVE_COMMENTS=1 PHP_OPCACHE_VALIDATE_TIMESTAMPS=1 PHP_OPEN_BASEDIR= PHP_POST_MAX_SIZE=100M PHP_REALPATH_CACHE_TTL=120 PHP_SESSION_COOKIE_SECURE=false PHP_UPLOAD_MAX_FILE_SIZE=100M PHP_ZEND_DETECT_UNICODE= PHP_ZEND_MULTIBYTE=Off S6_BEHAVIOUR_IF_STAGE2_FAILS=2 S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0 S6_KEEP_ENV=1 S6_VERBOSITY=1 SHOW_WELCOME_MESSAGE=true SSL_MODE=off SSL_CERTIFICATE_FILE=/etc/ssl/private/self-signed-web.crt SSL_PRIVATE_KEY_FILE=/etc/ssl/private/self-signed-web.key

COPY --chmod=755 src/common/ / # buildkit

COPY --chmod=755 src/s6/ / # buildkit

COPY --chmod=755 src/utilities-webservers/ / # buildkit

COPY /opt/s6/ / # buildkit

COPY /usr/local/bin/php-fpm-healthcheck /usr/local/bin/php-fpm-healthcheck # buildkit

COPY /usr/share/keyrings/nginx-archive-keyring.gpg /usr/share/keyrings/ # buildkit

COPY /etc/apt/sources.list.d/nginx.list /etc/apt/sources.list.d/ # buildkit

COPY /etc/apt/preferences.d/99nginx /etc/apt/preferences.d/ # buildkit

COPY /etc/apk/repositories /etc/apk/repositories # buildkit

COPY /etc/apk/keys/nginx_signing.rsa.pub /etc/apk/keys/ # buildkit

RUN |5 DEPENDENCY_PACKAGES_ALPINE=fcgi gettext shadow DEPENDENCY_PACKAGES_DEBIAN=libfcgi-bin gettext-base procps zip DEPENDENCY_PHP_EXTENSIONS=opcache pcntl pdo_mysql pdo_pgsql redis zip REPOSITORY_BUILD_VERSION=v4.2.1-19679516649 NGINX_VERSION=1.28.0-1~trixie /bin/sh -c docker-php-serversideup-dep-install-alpine "${DEPENDENCY_PACKAGES_ALPINE} nginx@nginx=${NGINX_VERSION}" && docker-php-serversideup-dep-install-debian "${DEPENDENCY_PACKAGES_DEBIAN} nginx=${NGINX_VERSION}" && docker-php-serversideup-install-php-ext-installer && chown -R www-data:www-data /var/www && chmod -R 755 /var/www && echo "${REPOSITORY_BUILD_VERSION}" > /etc/serversideup-php-version && mkdir -p "${COMPOSER_HOME}" && chown -R www-data:www-data "${COMPOSER_HOME}" && mkdir -p /var/cache/nginx/ && chown -R www-data:www-data /var/cache/nginx/ && install-php-extensions ${DEPENDENCY_PHP_EXTENSIONS} && rm -rf /usr/local/etc/php-fpm.d/*.conf && rm -rf /etc/nginx/conf.d/*.conf && rm -rf /etc/nginx/http.d/ && rm /etc/nginx/nginx.conf && if cat /etc/os-release | grep -qi 'Alpine'; then rm -rf /usr/share/keyrings/ && rm -rf /etc/apt/; else rm -rf /etc/apk/; fi # buildkit

COPY --chmod=755 src/variations/fpm-nginx/etc/ /etc/ # buildkit

COPY --chmod=755 src/php-fpm.d/ / # buildkit

COPY /usr/bin/composer /usr/bin/composer # buildkit

RUN |5 DEPENDENCY_PACKAGES_ALPINE=fcgi gettext shadow DEPENDENCY_PACKAGES_DEBIAN=libfcgi-bin gettext-base procps zip DEPENDENCY_PHP_EXTENSIONS=opcache pcntl pdo_mysql pdo_pgsql redis zip REPOSITORY_BUILD_VERSION=v4.2.1-19679516649 NGINX_VERSION=1.28.0-1~trixie /bin/sh -c docker-php-serversideup-set-file-permissions --owner www-data:www-data --service nginx # buildkit

RUN |5 DEPENDENCY_PACKAGES_ALPINE=fcgi gettext shadow DEPENDENCY_PACKAGES_DEBIAN=libfcgi-bin gettext-base procps zip DEPENDENCY_PHP_EXTENSIONS=opcache pcntl pdo_mysql pdo_pgsql redis zip REPOSITORY_BUILD_VERSION=v4.2.1-19679516649 NGINX_VERSION=1.28.0-1~trixie /bin/sh -c chown -R www-data:www-data /run # buildkit

USER www-data

EXPOSE [8080/tcp 8443/tcp]

ENTRYPOINT ["docker-php-serversideup-entrypoint"]

STOPSIGNAL SIGQUIT

WORKDIR /var/www/html

CMD ["/init"]

HEALTHCHECK &{["CMD" "sh" "-c" "curl --insecure --silent --location --show-error --fail http://localhost:${NGINX_HTTP_PORT}${HEALTHCHECK_PATH} || exit 1"] "10s" "3s" "1m0s" "3s" '\x03'}

ENV FIREFLY_III_PATH=/var/www/html COMPOSER_ALLOW_SUPERUSER=1 DEBIAN_FRONTEND=noninteractive PHP_MAX_EXECUTION_TIME=300 PHP_ERROR_REPORTING=24575 SHOW_WELCOME_MESSAGE=false BASE_IMAGE_BUILD=359 BASE_IMAGE_DATE=29-11-2025 06:58:32 CET PHP_OPCACHE_ENABLE=1

LABEL build_version=5.1 maintainer=james@firefly-iii.org

VOLUME [/var/www/html/storage/upload]

COPY conf/locale.gen /etc/locale.gen # buildkit

COPY scripts/wait-for-it.sh /usr/local/bin/wait-for-it.sh # buildkit

COPY scripts/finalize-image.sh /usr/local/bin/finalize-image.sh # buildkit

COPY scripts/execute-things-web.sh /etc/entrypoint.d/11-execute-things.sh # buildkit

USER root

RUN /bin/sh -c set -eux; chmod uga+x /usr/local/bin/wait-for-it.sh && chmod uga+x /usr/local/bin/finalize-image.sh && apt update && apt install -y curl locales && install-php-extensions intl bcmath memcached sockets && rm -rf /var/lib/apt/lists/* # buildkit

USER www-data

ARG version=v6.4.16

ENV VERSION=v6.4.16

ARG isodate=2026-01-17T08:56:15+01:00

ENV ISODATE=2026-01-17T08:56:15+01:00

ARG gitrevision=e7b67bc85efede756beea47c364cf0aac3e3138a

ENV GITREVISION=e7b67bc85efede756beea47c364cf0aac3e3138a

HEALTHCHECK &{["CMD" "sh" "-c" "curl --insecure --silent --location --show-error --fail http://localhost:8080$HEALTHCHECK_PATH || exit 1"] "5s" "3s" "5m0s" "0s" '\x03'}

LABEL org.opencontainers.image.authors=James Cole <james@firefly-iii.org> org.opencontainers.image.url=https://github.com/firefly-iii/docker org.opencontainers.image.documentation=https://docs.firefly-iii.org/ org.opencontainers.image.source=https://dev.azure.com/Firefly-III/_git/MainImage org.opencontainers.image.vendor=James Cole <james@firefly-iii.org> org.opencontainers.image.licenses=AGPL-3.0-or-later org.opencontainers.image.title=Firefly III org.opencontainers.image.description=Firefly III - personal finance manager org.opencontainers.image.base.name=docker.io/fireflyiii/base:latest

LABEL org.opencontainers.image.created=2026-01-17T08:56:15+01:00

LABEL org.opencontainers.image.version=v6.4.16

LABEL org.opencontainers.image.revision=e7b67bc85efede756beea47c364cf0aac3e3138a

COPY entrypoint.sh /usr/local/bin/entrypoint.sh # buildkit

COPY counter.txt /var/www/counter-main.txt # buildkit

COPY date.txt /var/www/build-date-main.txt # buildkit

USER root

RUN |3 version=v6.4.16 isodate=2026-01-17T08:56:15+01:00 gitrevision=e7b67bc85efede756beea47c364cf0aac3e3138a /bin/sh -c chmod uga+x /usr/local/bin/entrypoint.sh # buildkit

USER www-data

COPY download.zip /var/www/download.zip # buildkit

RUN |3 version=v6.4.16 isodate=2026-01-17T08:56:15+01:00 gitrevision=e7b67bc85efede756beea47c364cf0aac3e3138a /bin/sh -c unzip -q /var/www/download.zip -d $FIREFLY_III_PATH && chmod -R 775 $FIREFLY_III_PATH/storage && rm /var/www/download.zip # buildkit

COPY alerts.json /var/www/html/resources/alerts.json # buildkit