Monolith

Easily build PHP production environment based on Docker, integrating commonly used services such as OpenResty, PHP, MariaDB, Redis, Memcached.

git clone --depth 1 https://github.com/seatonjiang/monolith.git

Enter the project folder:

cd monolith/

Rename the environment configuration file (if you don't execute this command, the default configuration will be used):

cp env.example .env

Edit the .env file and modify the configuration as needed:

vi .env

Configuration items:

# PHP version (supports 8.1-8.4)
PHP_VERSION=8.4-fpm-alpine

# MariaDB default database name
MARIADB_DATABASE_NAME=monolith

# phpMyAdmin access port
PHPMYADMIN_WEB_PORT=28080

Modify the configuration files in the secrets directory:

• mariadb-root-pwd: MariaDB administrator password (username is root)
• mariadb-user-name: MariaDB username (default is user)
• mariadb-user-pwd: MariaDB user password

Tip: In production environments, be sure to change the default passwords, ensure strong passwords are used, and access with user-level permissions.

Build and run all containers in the background:

docker compose up -d

• Local environment: http://localhost
• Online environment: http://server IP address

Tip: The default site directory is wwwroot/default. For improved security in production environments, uncomment the return 403; configuration in default.conf (services/openresty/conf.d/default.conf), and delete or backup the default site directory. This prevents unauthorized access and potential security risks.

Project directory structure:

monolith
├── data                            Data persistence directory
│   ├── mariadb                     MariaDB data directory
│   └── redis                       Redis data directory
├── logs                            Log storage directory
│   ├── mariadb                     MariaDB log directory
│   ├── openresty                   OpenResty log directory
│   ├── php                         PHP log directory
│   └── redis                       Redis log directory
├── secrets                         Secret configuration directory
│   ├── mariadb-root-pwd            MariaDB administrator password
│   ├── mariadb-user-name           MariaDB username
│   └── mariadb-user-pwd            MariaDB user password
├── services                        Service configuration directory
│   ├── mariadb                     MariaDB configuration directory
│   ├── memcached                   Memcached configuration directory
│   ├── openresty                   OpenResty configuration directory
│   ├── php                         PHP configuration directory
│   ├── phpmyadmin                  phpMyAdmin configuration directory
│   └── redis                       Redis configuration directory
├── wwwroot                         Web service root directory
│   └── default                     Default site directory
├── compose.yaml                    Docker Compose configuration file
└── env.example                     Environment configuration example file

# Build and run all containers in the background
docker compose up -d

# Build and run specific containers (without running phpMyAdmin)
docker compose up -d openresty php mariadb redis memcached

# Stop all containers and remove network
docker compose down

# Manage specific services (using PHP container as an example)
docker compose start php            # Start service
docker compose stop php             # Stop service
docker compose restart php          # Restart service
docker compose build php            # Rebuild service

During operations, docker exec -it is often used to enter containers. Here are common commands:

# Enter running PHP container
docker exec -it php /bin/sh

# Enter running OpenResty container
docker exec -it openresty /bin/sh

# Enter running MariaDB container
docker exec -it mariadb /bin/bash

# Enter running Redis container
docker exec -it redis /bin/sh

# Enter running Memcached container
docker exec -it memcached /bin/sh

# Enter running phpMyAdmin container
docker exec -it phpmyadmin /bin/bash

You can optimize PHP performance by modifying the services/php/php.ini file according to your actual situation. Below are the optimized contents:

# Execution time and memory limits
max_execution_time = 180              # Maximum script execution time (seconds)
memory_limit = 256M                   # Maximum memory available for PHP processes
max_input_time = 300                  # Maximum time for each script to parse request data (seconds)

# Form and upload limits
max_input_vars = 5000                 # Maximum number of input variables
post_max_size = 65M                   # Maximum POST data size
upload_max_filesize = 64M             # Maximum upload file size

# Regional settings
date.timezone = Asia/Shanghai         # Timezone setting

# Error handling
error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT      # Error reporting level
error_log = /var/log/php/error.log                       # Error log location

You can optimize MariaDB performance by modifying the services/mariadb/mariadb.cnf file according to your actual situation. Below are optimization suggestions based on server resources:

# Small server (2GB memory)
innodb_buffer_pool_size=256M          # InnoDB buffer pool size
tmp_table_size=128M                   # Maximum size for in-memory temporary tables
max_heap_table_size=128M              # Maximum size for user-created memory tables

# Medium server (4GB memory)
innodb_buffer_pool_size=512M          # InnoDB buffer pool size
tmp_table_size=256M                   # Maximum size for in-memory temporary tables
max_heap_table_size=256M              # Maximum size for user-created memory tables

# Large server (8GB+ memory)
innodb_buffer_pool_size=2G            # InnoDB buffer pool size
tmp_table_size=512M                   # Maximum size for in-memory temporary tables
max_heap_table_size=512M              # Maximum size for user-created memory tables

# Performance monitoring (enable when needed in low-spec production environments)
performance_schema=ON
performance_schema_max_table_instances=400

You can optimize Redis performance by modifying the services/redis/redis.conf file according to your actual situation. Below are the optimized contents:

# Network configuration
bind 0.0.0.0                  # Allow Redis service access from any IP address, Redis service is only used internally, can use 0.0.0.0

# Persistence strategy
save 900 1                    # At least 1 key modified within 900 seconds
save 300 10                   # At least 10 keys modified within 300 seconds
save 60 10000                 # At least 10000 keys modified within 60 seconds

# Security configuration
rename-command FLUSHALL ""    # Disable command to clear all databases
rename-command EVAL     ""    # Disable command to execute Lua scripts
rename-command FLUSHDB  ""    # Disable command to clear current database

server {
    listen 80 reuseport;
    listen [::]:80 reuseport;

    server_name example.com;

    location / {
        return 301 https://example.com$request_uri;
    }
}

server {
    listen 443 ssl reuseport;
    listen [::]:443 ssl reuseport;
    http2 on;

    server_name example.com;
    root /var/www/example.com;
    index index.html index.php;

    ssl_certificate /etc/nginx/ssl/example.com.crt;
    ssl_certificate_key /etc/nginx/ssl/example.com.key;

    access_log /var/log/nginx/example.com.access.log combined buffer=1m flush=5m;
    error_log /var/log/nginx/example.com.error.log warn;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ [^/]\.php(/|$) {
        fastcgi_pass php:9000;
        include fastcgi.conf;
        include fastcgi-php.conf;
    }

    include /etc/nginx/rewrite/general.conf;
    include /etc/nginx/rewrite/security.conf;
    include /etc/nginx/rewrite/wordpress.conf;
}

docker exec -it openresty nginx -s reload

docker exec -it php /bin/sh
install-php-extensions smbclient

slowlog = /var/log/php/slowlog.log
request_slowlog_timeout = 3

slow_query_log=1
log_queries_not_using_indexes=1

general_log=1

requirepass your_strong_password

We welcome all contributions. You can submit any ideas as Pull requests or as Issues, have a good time!

The project is released under the MIT License, see the LICENSE file for details.