added the security hardened configs to be copied into the shipped image

This commit is contained in:
db1234719
2025-11-24 15:24:38 +03:30
parent 4ae504c26a
commit 0742760954

View File

@@ -69,6 +69,11 @@ RUN mkdir -p /usr/local/php/conf.d /var/run/php
# Copy compiled PHP
COPY --from=builder /usr/local/php /usr/local/php
# Copy hardened configs on top
COPY php-fpm.conf /usr/local/php/php-fpm.conf
COPY php-fpm.d/www.conf /usr/local/php/php-fpm.d/www.conf
COPY conf.d/security.ini /usr/local/php/conf.d/security.ini
EXPOSE 9000
USER php