feat: v2.5.0 - Complete Technology & Security Update
Features: - PHP 8.4 support (from 8.3) - WordPress 7.0 (auto-update via WP-CLI) - Modern TLS 1.3 cipher suites (2026 best practices) - Fail2Ban security integration (5 jails: SSH, Nginx, WordPress, recidive) - Auto-update cron job for WordPress (weekly Minor updates) - Debian 14 Forky support (testing) - Ubuntu 25.04 support - Python 3.12 in GitHub Actions Security: - Fail2Ban with SSH brute force protection (24h ban) - WordPress wp-login.php protection (2h ban) - Nginx bot scanner protection - Recidive jail for repeat offenders (1 week ban) - Modern TLS ciphers (AEAD only) - HSTS 2 years for preload Documentation: - docs/autoupdate.md - WordPress auto-update guide - docs/fail2ban.md - Fail2Ban configuration guide - docs/troubleshooting.md - Updated with php_version variable Breaking changes: - PHP 8.4 is now the default (requires Ubuntu 20.04+ or Debian 11+)
This commit is contained in:
32
docker/Dockerfile
Normal file → Executable file
32
docker/Dockerfile
Normal file → Executable file
@@ -53,20 +53,20 @@ RUN apt-get update && apt-get install -y \
|
||||
mysql-server \
|
||||
mysql-client \
|
||||
# PHP and extensions
|
||||
php8.3 \
|
||||
php8.3-fpm \
|
||||
php8.3-cli \
|
||||
php8.3-mysql \
|
||||
php8.3-gd \
|
||||
php8.3-xml \
|
||||
php8.3-mbstring \
|
||||
php8.3-curl \
|
||||
php8.3-zip \
|
||||
php8.3-intl \
|
||||
php8.3-soap \
|
||||
php8.3-xmlrpc \
|
||||
php8.3-opcache \
|
||||
php8.3-redis \
|
||||
php8.4 \
|
||||
php8.4-fpm \
|
||||
php8.4-cli \
|
||||
php8.4-mysql \
|
||||
php8.4-gd \
|
||||
php8.4-xml \
|
||||
php8.4-mbstring \
|
||||
php8.4-curl \
|
||||
php8.4-zip \
|
||||
php8.4-intl \
|
||||
php8.4-soap \
|
||||
php8.4-xmlrpc \
|
||||
php8.4-opcache \
|
||||
php8.4-redis \
|
||||
# Security and monitoring
|
||||
fail2ban \
|
||||
ufw \
|
||||
@@ -85,7 +85,7 @@ RUN sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/' /etc/ssh/
|
||||
RUN systemctl enable ssh \
|
||||
&& systemctl enable nginx \
|
||||
&& systemctl enable mysql \
|
||||
&& systemctl enable php8.3-fpm
|
||||
&& systemctl enable php8.4-fpm
|
||||
|
||||
# Create web directory structure
|
||||
RUN mkdir -p /var/www/html \
|
||||
@@ -111,6 +111,6 @@ CMD ["/usr/local/bin/start-services.sh"]
|
||||
|
||||
# Labels for metadata
|
||||
LABEL org.opencontainers.image.title="LEMP WordPress Testing Environment"
|
||||
LABEL org.opencontainers.image.description="Ubuntu 24.04 with Nginx, MySQL, PHP 8.3 for WordPress testing"
|
||||
LABEL org.opencontainers.image.description="Ubuntu 24.04 LTS with Nginx, MySQL, PHP 8.4 for WordPress testing"
|
||||
LABEL org.opencontainers.image.version="1.0"
|
||||
LABEL org.opencontainers.image.licenses="MIT"
|
||||
|
||||
0
docker/docker-compose.yml
Normal file → Executable file
0
docker/docker-compose.yml
Normal file → Executable file
2
docker/start-services.sh
Normal file → Executable file
2
docker/start-services.sh
Normal file → Executable file
@@ -5,7 +5,7 @@
|
||||
service mysql start
|
||||
|
||||
# PHP-FPM starten
|
||||
service php8.3-fpm start
|
||||
service php8.4-fpm start
|
||||
|
||||
# Nginx starten
|
||||
service nginx start
|
||||
|
||||
Reference in New Issue
Block a user