feat: add containerized deployment workflow

docker/nginx/Dockerfile

@@ -1,20 +0,0 @@
-FROM php:8.4-cli-bookworm AS builder
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    curl ca-certificates git unzip \
-    && rm -rf /var/lib/apt/lists/*
-RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
-    && apt-get update && apt-get install -y --no-install-recommends nodejs \
-    && rm -rf /var/lib/apt/lists/*
-RUN curl -sS https://getcomposer.org/installer | php -- \
-    --install-dir=/usr/local/bin --filename=composer
-WORKDIR /var/www
-COPY . /var/www
-RUN composer install --no-dev --prefer-dist --no-interaction --no-progress --optimize-autoloader
-RUN npm ci && npm run build
-
-FROM nginx:alpine
-COPY ./docker/nginx/nginx.conf /etc/nginx/nginx.conf
-COPY --from=builder /var/www/public /var/www/public
-WORKDIR /var/www/public
-EXPOSE 80
-CMD ["nginx", "-g", "daemon off;"]

docker/nginx/nginx.conf

@@ -1,33 +0,0 @@
-events {
-    worker_connections  1024;
-}
-http {
-    include       /etc/nginx/mime.types;
-    default_type  application/octet-stream;
-    sendfile        on;
-    keepalive_timeout  65;
-    client_max_body_size 100m;
-
-    server {
-        listen 80;
-        server_name localhost;
-        root /var/www/public;
-        index index.php index.html;
-        location / {
-            try_files $uri $uri/ /index.php?$query_string;
-        }
-         location ^~ /storage/ {
-            alias /var/www/storage/app/public/;
-            try_files $uri =404;
-            access_log off;
-            expires 7d;
-            add_header Cache-Control "public";
-        }
-        location ~ \.php$ {
-            fastcgi_pass php-fpm:9000;
-            fastcgi_index index.php;
-            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            include fastcgi_params;
-        }
-    }
-}

docker/nginx/nginx.conf.template

@@ -0,0 +1,54 @@
+pid /tmp/nginx.pid;
+error_log /dev/stderr warn;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+
+    access_log /dev/stdout;
+    client_body_temp_path /tmp/client_body;
+    proxy_temp_path /tmp/proxy;
+    fastcgi_temp_path /tmp/fastcgi;
+    uwsgi_temp_path /tmp/uwsgi;
+    scgi_temp_path /tmp/scgi;
+
+    sendfile on;
+    keepalive_timeout 65;
+    client_max_body_size 3m;
+
+    server {
+        listen 8080;
+        server_name _;
+        root /var/www/public;
+        index index.php;
+
+        location = /nginx-health {
+            access_log off;
+            default_type text/plain;
+            return 200 'ok';
+        }
+
+        location / {
+            try_files $uri $uri/ /index.php?$query_string;
+        }
+
+        location = /index.php {
+            include fastcgi_params;
+            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+            fastcgi_param HTTP_PROXY '';
+            fastcgi_pass ${PHP_FPM_UPSTREAM};
+        }
+
+        location ~ \.php$ {
+            return 404;
+        }
+
+        location ~ /\. {
+            deny all;
+        }
+    }
+}