From 0742760954a4f160e124b28745bf55013bc2848c Mon Sep 17 00:00:00 2001
From: db1234719 <erfan.mohamadi110@gmail.com>
Date: Mon, 24 Nov 2025 15:24:38 +0330
Subject: [PATCH] added the security hardened configs to be copied into the
 shipped image

---
 Dockerfile | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index c752780..ca0071b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -69,6 +69,11 @@ RUN mkdir -p /usr/local/php/conf.d /var/run/php
 # Copy compiled PHP
 COPY --from=builder /usr/local/php /usr/local/php
 
+# Copy hardened configs on top
+COPY php-fpm.conf /usr/local/php/php-fpm.conf
+COPY php-fpm.d/www.conf /usr/local/php/php-fpm.d/www.conf
+COPY conf.d/security.ini /usr/local/php/conf.d/security.ini
+
 EXPOSE 9000
 
 USER php