first commit

.root-fs/etc/nginx/conf.d/app.conf

@@ -0,0 +1,60 @@
+map $http_upgrade $type {
+  default "web";
+  websocket "ws";
+}
+
+server {
+  listen 80 default;
+  server_name _;
+  root /app/public;
+
+  index index.php;
+
+  location / { try_files /i-should-not-exist @$type; }
+
+  location @web { try_files $uri $uri/ @octane; }
+
+  location = /favicon.ico { access_log off; log_not_found off; }
+  location = /robots.txt  { access_log off; log_not_found off; }
+
+  location @ws {
+    proxy_set_header Host $http_host;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection "upgrade";
+    proxy_cache_bypass $http_upgrade;
+    proxy_http_version 1.1;
+    proxy_redirect off;
+
+    proxy_pass http://127.0.0.1:8080;
+  }
+
+  location @octane {
+    proxy_send_timeout 300;
+    proxy_read_timeout 300;
+
+    client_max_body_size 512M;
+    client_body_temp_path /tmp;
+
+    proxy_set_header Host $http_host;
+    proxy_set_header SERVER_PORT $server_port;
+    proxy_set_header REMOTE_ADDR $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+    proxy_pass http://127.0.0.1:8090$uri?$query_string;
+  }
+
+  location ~ \.php$ {
+    proxy_send_timeout 300;
+    proxy_read_timeout 300;
+
+    client_max_body_size 512M;
+    client_body_temp_path /tmp;
+
+    proxy_set_header Host $http_host;
+    proxy_set_header SERVER_PORT $server_port;
+    proxy_set_header REMOTE_ADDR $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+    proxy_pass http://127.0.0.1:8090$uri?$query_string;
+  }
+}

.root-fs/etc/nginx/nginx.conf

@@ -0,0 +1,98 @@
+user www;
+worker_processes auto;
+
+pcre_jit on;
+
+pid /run/nginx.pid;
+include /etc/nginx/modules/*.conf;
+
+worker_rlimit_nofile 64000;
+
+events {
+    worker_connections 8192;
+    multi_accept on;
+    use epoll;
+}
+
+http {
+    ##
+    # Basic Settings
+    ##
+
+
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
+    keepalive_timeout 65;
+    keepalive_requests 2000;
+    reset_timedout_connection on;
+
+    types_hash_max_size 2048;
+    client_max_body_size 512m;
+
+    proxy_buffer_size   128k;
+    proxy_buffers   16 128k;
+    proxy_busy_buffers_size   128k;
+
+    server_names_hash_bucket_size 64;
+    server_name_in_redirect off;
+    server_tokens off;
+
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+
+    ##
+    # SSL Settings
+    ##
+
+    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES256-SHA384;
+    ssl_session_timeout 1h;
+    ssl_session_cache shared:SSL:50m;
+    ssl_session_tickets off;
+    ssl_stapling on;
+    ssl_stapling_verify on;
+    add_header Strict-Transport-Security max-age=15768000;
+
+    ##
+    # Logging Settings
+    ##
+
+    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
+          '$status $body_bytes_sent "$http_referer" '
+          '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log /var/log/nginx/access.log main;
+    error_log /var/log/nginx/error.log error;
+
+    ##
+    # Gzip Settings
+    ##
+
+    gzip on;
+    gzip_disable "msie6";
+    gzip_min_length 20;
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 6;
+    gzip_buffers 16 8k;
+    gzip_http_version 1.1;
+    gzip_types text/css text/x-component application/x-javascript application/javascript text/javascript text/x-js text/richtext image/svg+xml text/plain text/xsd text/xsl text/xml image/bmp application/java application/msword application/vnd.ms-fontobject application/x-msdownload image/x-icon image/webp application/json application/vnd.ms-access application/vnd.ms-project application/x-font-otf application/vnd.ms-opentype application/vnd.oasis.opendocument.database application/vnd.oasis.opendocument.chart application/vnd.oasis.opendocument.formula application/vnd.oasis.opendocument.graphics application/vnd.oasis.opendocument.spreadsheet application/vnd.oasis.opendocument.text audio/ogg application/pdf application/vnd.ms-powerpoint application/x-shockwave-flash image/tiff application/x-font-ttf audio/wav application/vnd.ms-write application/font-woff application/font-woff2 application/vnd.ms-excel;
+
+    open_file_cache max=200000 inactive=3600s;
+    open_file_cache_valid 3600s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors off;
+
+    ##
+    # Virtual Host Configs
+    ##
+
+    map $http_upgrade $connection_upgrade {
+        default upgrade;
+        '' close;
+    }
+
+    include /etc/nginx/conf.d/app.conf;
+}

.root-fs/etc/php82/conf.d/99_cattr.ini

@@ -0,0 +1,4 @@
+post_max_size = 512M
+upload_max_filesize = 512M
+memory_limit = -1
+

.root-fs/etc/s6-overlay/s6-rc.d/create-admin/type

@@ -0,0 +1 @@
+oneshot

.root-fs/etc/s6-overlay/s6-rc.d/create-admin/up

@@ -0,0 +1 @@
+with-contenv s6-setuidgid www php82 /app/artisan cattr:make:admin

.root-fs/etc/s6-overlay/s6-rc.d/laravel/run

@@ -0,0 +1,6 @@
+#!/usr/bin/execlineb -P
+
+with-contenv
+s6-setuidgid 10000:4
+
+php82 /app/artisan octane:start --host=0.0.0.0 --port=8090

.root-fs/etc/s6-overlay/s6-rc.d/laravel/type

@@ -0,0 +1 @@
+longrun

.root-fs/etc/s6-overlay/s6-rc.d/nginx/run

@@ -0,0 +1,2 @@
+#!/usr/bin/execlineb -P
+nginx -g "daemon off;"

.root-fs/etc/s6-overlay/s6-rc.d/nginx/type

@@ -0,0 +1 @@
+longrun

.root-fs/etc/s6-overlay/s6-rc.d/prepare-cache/type

@@ -0,0 +1 @@
+oneshot

.root-fs/etc/s6-overlay/s6-rc.d/prepare-cache/up

@@ -0,0 +1 @@
+with-contenv s6-setuidgid www php82 /app/artisan config:cache

.root-fs/etc/s6-overlay/s6-rc.d/prepare-database/timeout-up

@@ -0,0 +1 @@
+600000

.root-fs/etc/s6-overlay/s6-rc.d/prepare-database/type

@@ -0,0 +1 @@
+oneshot

.root-fs/etc/s6-overlay/s6-rc.d/prepare-database/up

@@ -0,0 +1 @@
+with-contenv s6-envuidgid www php82 /app/artisan migrate --force --seed --seeder=InitialSeeder

.root-fs/etc/s6-overlay/s6-rc.d/prepare-filesystem/type

@@ -0,0 +1 @@
+oneshot

.root-fs/etc/s6-overlay/s6-rc.d/prepare-filesystem/up

@@ -0,0 +1,9 @@
+if { mkdir -p /var/lib/nginx/tmp }
+if { mkdir -p /var/log/nginx }
+if { mkdir -p /app/storage/logs }
+if { mkdir -p /app/storage/framework/views }
+if { mkdir -p /app/storage/framework/cache }
+if { mkdir -p /app/storage/framework/sessions }
+if { mkdir -p /app/storage/app/screenshots }
+if { mkdir -p /app/storage/app/modules }
+chown -R www:www /app/storage

.root-fs/etc/s6-overlay/s6-rc.d/queue/run

@@ -0,0 +1,6 @@
+#!/usr/bin/execlineb -P
+
+with-contenv
+s6-setuidgid www
+
+php82 /app/artisan queue:work --sleep=3

.root-fs/etc/s6-overlay/s6-rc.d/queue/type

@@ -0,0 +1 @@
+longrun

.root-fs/etc/s6-overlay/s6-rc.d/reverb/run

@@ -0,0 +1,6 @@
+#!/usr/bin/execlineb -P
+
+with-contenv
+s6-setuidgid www
+
+php82 /app/artisan reverb:start --host=0.0.0.0 --port=8080

.root-fs/etc/s6-overlay/s6-rc.d/reverb/type

@@ -0,0 +1 @@
+longrun

.root-fs/etc/s6-overlay/s6-rc.d/supercronic/run

@@ -0,0 +1,6 @@
+#!/usr/bin/execlineb -P
+
+with-contenv
+s6-setuidgid www
+
+/usr/bin/supercronic /crontab

.root-fs/etc/s6-overlay/s6-rc.d/supercronic/type

@@ -0,0 +1 @@
+longrun