improve dockerfile for https in production

Author: adenvt

Dockerfile

@@ -35,16 +35,27 @@ COPY composer.json composer.json
 COPY composer.lock composer.lock
 RUN composer config -g repos.packagist composer https://packagist.jp
 RUN composer global require hirak/prestissimo
-RUN composer install --prefer-dist --no-scripts --no-dev --no-autoloader && rm -rf /root/.composer
+RUN composer install \
+  --prefer-dist \
+  --no-ansi \
+  --no-dev \
+  --no-interaction \
+  --no-progress \
+  --no-scripts \
+  --no-autoloader \
+  && rm -rf /root/.composer
 
 COPY deploy/web/site.conf /etc/nginx/sites-available/default
 COPY deploy/web/nginx.conf /etc/nginx/nginx.conf
 COPY deploy/web/mime.types /etc/nginx/mime.types
-COPY deploy/web/php.ini /usr/local/etc/php/
+COPY deploy/web/php.ini /usr/local/etc/php/php.ini
 COPY --from=compiler /var/www /var/www
 
-RUN composer dump-autoload --no-scripts --no-dev --optimize
+RUN composer dump-autoload --no-dev --optimize
 RUN chown -R www-data:www-data /var/www
+RUN php artisan config:cache \
+  && php artisan route:cache \
+  && php artisan view:cache
 RUN rm -rf /var/www/html/ /var/www/deploy/
 
 EXPOSE 80 443

app/Http/Controllers/AppController.php

@@ -0,0 +1,12 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+class AppController extends Controller
+{
+    public function index (Request $request) {
+        return view('app');
+    }
+}

deploy/web/site.conf

@@ -7,24 +7,36 @@ server {
   root  $root_path;
   index index.php;
 
+  add_header X-Frame-Options        "SAMEORIGIN";
+  add_header X-XSS-Protection       "1; mode=block";
+  add_header X-Content-Type-Options "nosniff";
+
+  charset utf-8;
+
   location / {
-    try_files $uri $uri/ /index.php?$args;
+    try_files $uri $uri/ /index.php?$query_string;
   }
 
-  client_max_body_size 100m;
+  client_max_body_size  100M;
+
+  location = /favicon.ico { access_log off; log_not_found off; }
+  location = /robots.txt  { access_log off; log_not_found off; }
+
+  error_page 404 /index.php;
 
   location ~ \.php {
     include fastcgi_params;
 
     fastcgi_index                 /index.php;
     fastcgi_pass                  127.0.0.1:9000;
     fastcgi_split_path_info       ^(.+\.php)(/.+)$;
-    fastcgi_param PATH_INFO       $fastcgi_path_info;
     fastcgi_intercept_errors      on;
+    fastcgi_param HTTPS           on;
+    fastcgi_param PATH_INFO       $fastcgi_path_info;
     fastcgi_param SCRIPT_FILENAME $root_path$fastcgi_script_name;
   }
 
-  location ~ /\.git {
-    deny all;
+  location ~ /\.(?!well-known).* {
+      deny all;
   }
 }

resources/views/app.blade.php

@@ -29,28 +29,34 @@
             <div class="app flex-row align-items-center">
                 <div class="container">
                     <div class="row justify-content-center">
-                        <div class="col-md-6">
-                            <div class="clearfix">
-                                <h1 class="float-left display-3 mr-4">
-                                    <i class="fa fa-warning"></i>
-                                </h1>
-                                <h4 class="pt-3">Javascript Required</h4>
-                                <p class="text-muted">
-                                    Please enabling Javascript or try with other browser which have Javascript Support.<br>
-                                    <a class="btn btn-primary mt-3" href="{{ url()->current() }}">
-                                        Reload Page
-                                    </a>
-                                </p>
-                            </div>
+                        <div class="col-md-6 p-3">
+                            <h1 class="text-center text-md-left">
+                                <i class="fa fa-warning fa-2x"></i>
+                            </h1>
+                            <h4 class="pt-3">Browser not Support</h4>
+                            <p class="text-muted">
+                                Try other browser which have Javascript Support. Recommendation is
+                                <a href="https://www.google.com/chrome/?brand=CHBD&gclid=CjwKCAjw6-_eBRBXEiwA-5zHaa78eJ_HfOScWr1D4PzHFZY2k2zRHc9pcHZ9gvAaHbljCsSC1gv0jBoCKIUQAvD_BwE&gclsrc=aw.ds">
+                                    Google Chrome
+                                </a>
+                                or
+                                <a href="https://www.mozilla.org/en-US/">
+                                    Mozilla Firefox
+                                </a>
+                                <br>
+                                <a class="btn btn-primary mt-3" href="{{ url()->current() }}">
+                                    Reload Page
+                                </a>
+                            </p>
                         </div>
                     </div>
                 </div>
             </div>
         </noscript>
     </div>
-    <script src="{{ asset(mix('js/manifest.js')) }}"></script>
-    <script src="{{ asset(mix('js/vendor.js')) }}"></script>
-    <script src="{{ asset(mix('js/app.js')) }}"></script>
+    <script defer src="{{ asset(mix('js/manifest.js')) }}"></script>
+    <script defer src="{{ asset(mix('js/vendor.js')) }}"></script>
+    <script defer src="{{ asset(mix('js/app.js')) }}"></script>
 </body>
 
 </html>

routes/api.php

@@ -13,6 +13,6 @@
 |
 */
 
-Route::middleware('auth:api')->get('/user', function (Request $request) {
-    return $request->user();
-});
+// Route::middleware('auth:api')->get('/user', function (Request $request) {
+//     return $request->user();
+// });

routes/web.php

@@ -11,6 +11,4 @@
 |
 */
 
-Route::get('/{vue_capture?}', function () {
-    return view('app');
-})->where('vue_capture', '[\/\w\.\,\-]*');
+Route::get('/{vue_capture?}', 'AppController@index')->where('vue_capture', '[\/\w\.\,\-]*');

webpack.mix.js

@@ -87,6 +87,7 @@ mix.options({
     host: '0.0.0.0',
     port: 8080,
   },
+  uglify: { parallel: true },
 })
 
 if (mix.inProduction())