Web Server Setup for Flute CMS

<VirtualHost *:80>
    ServerName example.com
    ServerAlias www.example.com
    DocumentRoot /var/www/flute-cms/public
 
    <Directory /var/www/flute-cms/public>
        AllowOverride All
        Require all granted
 
        # Enable mod_rewrite
        RewriteEngine On
 
        # Route all requests through index.php
        RewriteCond %{REQUEST_FILENAME} !-f
        RewriteCond %{REQUEST_FILENAME} !-d
        RewriteRule ^(.*)$ index.php [QSA,L]
    </Directory>
 
    # Deny access to internal folders
    <Directory /var/www/flute-cms/storage>
        Require all denied
    </Directory>
 
    <Directory /var/www/flute-cms/config>
        Require all denied
    </Directory>
 
    # Logs
    ErrorLog ${APACHE_LOG_DIR}/flute-cms-error.log
    CustomLog ${APACHE_LOG_DIR}/flute-cms-access.log combined
</VirtualHost>

<VirtualHost *:443>
    ServerName example.com
    ServerAlias www.example.com
    DocumentRoot /var/www/flute-cms/public
 
    # SSL settings
    SSLEngine on
    SSLCertificateFile /path/to/certificate.crt
    SSLCertificateKeyFile /path/to/private.key
    SSLCertificateChainFile /path/to/chain.crt
 
    # The rest of the configuration is the same as HTTP
    <Directory /var/www/flute-cms/public>
        AllowOverride All
        Require all granted
        RewriteEngine On
        RewriteCond %{REQUEST_FILENAME} !-f
        RewriteCond %{REQUEST_FILENAME} !-d
        RewriteRule ^(.*)$ index.php [QSA,L]
    </Directory>
</VirtualHost>

<IfModule mod_rewrite.c>
    RewriteEngine On
 
    # Redirect to HTTPS (optional)
    # RewriteCond %{HTTPS} off
    # RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
 
    # Request handling
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^(.*)$ index.php [QSA,L]
</IfModule>
 
# Security
<Files "*.env">
    Require all denied
</Files>
 
<Files "composer.*">
    Require all denied
</Files>
 
# Static file caching
<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresByType text/css "access plus 1 month"
    ExpiresByType application/javascript "access plus 1 month"
    ExpiresByType image/png "access plus 1 month"
    ExpiresByType image/jpg "access plus 1 month"
    ExpiresByType image/jpeg "access plus 1 month"
    ExpiresByType image/gif "access plus 1 month"
    ExpiresByType image/svg+xml "access plus 1 month"
</IfModule>

server {
    listen 80;
    listen [::]:80;
    server_name example.com www.example.com;
    root /var/www/flute-cms/public;
    index index.php index.html;
 
    # Logs
    access_log /var/log/nginx/flute-cms-access.log;
    error_log /var/log/nginx/flute-cms-error.log;
 
    # Main request handling
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
 
    # PHP file handling
    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }
 
    # Deny access to internal files
    location ~ /\. {
        deny all;
    }
 
    location ~ ^/(storage|config|vendor)/ {
        deny all;
    }
 
    location ~ \.(env|composer\.(json|lock))$ {
        deny all;
    }
 
    # Static file caching
    location ~* \.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
        expires 1M;
        add_header Cache-Control "public, immutable";
        try_files $uri =404;
    }
 
    # Compression
    gzip on;
    gzip_vary on;
    gzip_min_length 1024;
    gzip_types text/plain text/css text/xml text/javascript application/javascript application/xml+rss application/json;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name example.com www.example.com;
    root /var/www/flute-cms/public;
    index index.php index.html;
 
    # SSL certificates
    ssl_certificate /path/to/certificate.crt;
    ssl_certificate_key /path/to/private.key;
    ssl_trusted_certificate /path/to/chain.crt;
 
    # SSL settings
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384;
    ssl_prefer_server_ciphers off;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;
 
    # HSTS
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
 
    # The rest of the configuration is the same as the HTTP block
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
 
    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }
 
    # Other location blocks...
}
 
# Redirect HTTP to HTTPS
server {
    listen 80;
    listen [::]:80;
    server_name example.com www.example.com;
    return 301 https://$server_name$request_uri;
}

# Create a symbolic link
sudo ln -s /etc/nginx/sites-available/flute-cms /etc/nginx/sites-enabled/
 
# Test the configuration
sudo nginx -t
 
# Reload Nginx
sudo systemctl reload nginx

# Main settings
server.modules = (
    "mod_access",
    "mod_alias",
    "mod_compress",
    "mod_redirect",
    "mod_rewrite",
    "mod_fastcgi",
    "mod_expire"
)

server.document-root = "/var/www/flute-cms/public"
server.upload-dirs = ( "/var/cache/lighttpd/uploads" )
server.errorlog = "/var/log/lighttpd/error.log"
server.pid-file = "/var/run/lighttpd.pid"
server.username = "www-data"
server.groupname = "www-data"
server.port = 80

# MIME types
mimetype.assign = (
    ".html" => "text/html",
    ".txt" => "text/plain",
    ".jpg" => "image/jpeg",
    ".png" => "image/png",
    ".css" => "text/css",
    ".js" => "application/javascript"
)

# Index files
index-file.names = ( "index.php", "index.html" )

# PHP handling
fastcgi.server = ( ".php" =>
    ((
        "bin-path" => "/usr/bin/php-cgi",
        "socket" => "/tmp/php.socket",
        "max-procs" => 2,
        "idle-timeout" => 20,
        "bin-environment" => (
            "PHP_FCGI_CHILDREN" => "4",
            "PHP_FCGI_MAX_REQUESTS" => "10000"
        ),
        "bin-copy-environment" => (
            "PATH", "SHELL", "USER"
        ),
        "broken-scriptfilename" => "enable"
    ))
)

# URL rewriting for Flute CMS
url.rewrite-once = (
    "^/(.*\.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot))$" => "/$1",
    "^/(.*)$" => "/index.php"
)

# Deny access to internal files
$HTTP["url"] =~ "^/(storage|config|vendor)/" {
    url.access-deny = ( "" )
}

$HTTP["url"] =~ "\.(env|composer\.(json|lock))$" {
    url.access-deny = ( "" )
}

# Compression
compress.cache-dir = "/var/cache/lighttpd/compress/"
compress.filetype = ( "application/javascript", "text/css", "text/html", "text/plain" )

# Caching
expire.url = (
    "/css/" => "access plus 1 months",
    "/js/" => "access plus 1 months",
    "/images/" => "access plus 1 months"
)

version: '3.8'
 
services:
  web:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: flute_web
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - .:/var/www/html
      - ./docker/nginx.conf:/etc/nginx/sites-available/default
      - ./docker/ssl:/etc/ssl/certs
    depends_on:
      - db
      - redis
    environment:
      - PHP_OPCACHE_ENABLE=1
      - PHP_OPCACHE_MEMORY_CONSUMPTION=256
      - PHP_OPCACHE_MAX_ACCELERATED_FILES=20000
 
  db:
    image: mysql:8.0
    container_name: flute_db
    environment:
      MYSQL_ROOT_PASSWORD: root_password
      MYSQL_DATABASE: flute_cms
      MYSQL_USER: flute_user
      MYSQL_PASSWORD: flute_password
    ports:
      - "3306:3306"
    volumes:
      - mysql_data:/var/lib/mysql
      - ./docker/mysql.cnf:/etc/mysql/conf.d/custom.cnf
 
  redis:
    image: redis:7-alpine
    container_name: flute_redis
    ports:
      - "6379:6379"
    volumes:
      - redis_data:/data
 
  phpmyadmin:
    image: phpmyadmin/phpmyadmin
    container_name: flute_phpmyadmin
    environment:
      PMA_HOST: db
      PMA_USER: root
      PMA_PASSWORD: root_password
    ports:
      - "8080:80"
    depends_on:
      - db
 
volumes:
  mysql_data:
  redis_data:

FROM php:8.2-fpm-alpine
 
# Install system dependencies
RUN apk add --no-cache \
    nginx \
    supervisor \
    freetype-dev \
    libjpeg-turbo-dev \
    libpng-dev \
    libzip-dev \
    icu-dev \
    gmp-dev \
    oniguruma-dev
 
# Install PHP extensions
RUN docker-php-ext-configure gd --with-freetype --with-jpeg \
    && docker-php-ext-install -j$(nproc) \
        gd \
        pdo_mysql \
        zip \
        ioncube \
        intl \
        bcmath \
        gmp \
        opcache
 
# Copy configurations
COPY docker/nginx.conf /etc/nginx/sites-available/default
COPY docker/php.ini /usr/local/etc/php/conf.d/custom.ini
COPY docker/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
 
# Install Composer
COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
 
# Working directory
WORKDIR /var/www/html
 
# Copy application files
COPY . .
 
# Install dependencies
RUN composer install --no-dev --optimize-autoloader
 
# Access permissions
RUN chown -R www-data:www-data /var/www/html \
    && chmod -R 755 storage \
    && chmod -R 755 public/uploads
 
EXPOSE 80 443
 
CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]

server {
    listen 80;
    server_name localhost;
    root /var/www/html/public;
    index index.php index.html;
 
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
 
    location ~ \.php$ {
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }
 
    location ~ /\. {
        deny all;
    }
}