Dockerfile

# WordPress with Nginx + PHP-FPM
#
# Base: PHP 8.3 FPM on Debian Bookworm
# Architecture: Nginx + PHP-FPM managed by Supervisor (single container)
#
# Why not Apache? Nginx + PHP-FPM provides:
# - Better performance and lower memory usage
# - Easier rate limiting and security configurations
# - More efficient handling of static files
#
FROM php:8.3-fpm-bookworm

# Install system dependencies and required libraries
# nginx: Web server
# supervisor: Process manager for nginx + php-fpm
# mysql-client/redis-tools: For healthchecks and debugging
RUN apt-get update && apt-get install -y \
        libicu-dev libzip-dev libpng-dev libjpeg62-turbo-dev \
        libfreetype6-dev libmagickwand-dev \
        nginx supervisor curl \
        default-mysql-client redis-tools \
    && rm -rf /var/lib/apt/lists/*

# Install PHP extensions required by WordPress and common plugins
# gd: Image manipulation, intl: Internationalization
# mysqli/pdo_mysql: Database, opcache: Performance
# zip: Plugin/theme uploads, bcmath: E-commerce calculations
RUN docker-php-ext-configure gd --with-freetype --with-jpeg \
    && docker-php-ext-install -j$(nproc) gd intl mysqli opcache exif zip sockets pdo_mysql bcmath

# Install Redis extension with igbinary for efficient object serialization
# This reduces memory usage and improves cache performance
RUN pecl install igbinary-3.2.15 redis-6.0.2 \
    && docker-php-ext-enable igbinary redis \
    && rm -rf /tmp/pear

# Install ImageMagick for advanced image processing
# Used by plugins for thumbnails, watermarks, etc.
RUN pecl install imagick \
    && docker-php-ext-enable imagick \
    && rm -rf /tmp/pear

# Install WP-CLI for command-line WordPress management
# Used in entrypoint script for automated setup
RUN curl -o /usr/local/bin/wp https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar \
    && chmod +x /usr/local/bin/wp

# Create required runtime directories
RUN mkdir -p /var/www/html /var/log/nginx /var/log/php-fpm /var/log/supervisor \
    /run/nginx /run/php

RUN chown -R www-data:www-data /var/www/html /var/log/nginx \
    /var/log/php-fpm /run/nginx /run/php

# Copy all configuration files
# See config/ directory for individual file documentation
COPY config/php/custom.ini /usr/local/etc/php/conf.d/custom.ini
COPY config/php/opcache.ini /usr/local/etc/php/conf.d/opcache.ini
COPY config/php/www.conf /usr/local/etc/php-fpm.d/www.conf
COPY config/nginx/nginx.conf /etc/nginx/nginx.conf
COPY config/nginx/default.conf /etc/nginx/conf.d/default.conf
COPY config/supervisor/supervisord.conf /etc/supervisord.conf
COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh

RUN rm -f /etc/nginx/sites-enabled/default \
    && chmod +x /usr/local/bin/docker-entrypoint.sh

WORKDIR /var/www/html
EXPOSE 80

HEALTHCHECK --interval=10s --timeout=5s --start-period=40s --retries=3 \
    CMD curl -f http://localhost/health || exit 1

# Entrypoint downloads WordPress, creates wp-config.php, and handles migrations
# Supervisor then starts both nginx and php-fpm as managed processes
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
CMD ["/usr/bin/supervisord", "-c", "/etc/supervisord.conf"]