Dockerfile

# Image de base - Apache avec PHP 7.4
FROM php:7.4-apache

# Métadonnées
LABEL maintainer="CYBERTECH SERVICES"
LABEL description="Secure Internal Web Service - CYBERTECH"
LABEL version="1.0"

# Installation des extensions PHP nécessaires
RUN docker-php-ext-install pdo pdo_mysql mysqli

# Installation des outils utiles
RUN apt-get update && apt-get install -y \
    curl \
    vim \
    && rm -rf /var/lib/apt/lists/*

# Activation des modules Apache nécessaires
RUN a2enmod rewrite headers

# Configuration PHP pour la sécurité
RUN { \
    echo 'display_errors = Off'; \
    echo 'log_errors = On'; \
    echo 'error_log = /var/log/apache2/php_errors.log'; \
    echo 'expose_php = Off'; \
    echo 'session.cookie_httponly = 1'; \
    echo 'session.cookie_secure = 0'; \
    echo 'session.use_strict_mode = 1'; \
    echo 'session.use_only_cookies = 1'; \
    echo 'upload_max_filesize = 5M'; \
    echo 'post_max_size = 5M'; \
    echo 'max_execution_time = 30'; \
    echo 'memory_limit = 128M'; \
} > /usr/local/etc/php/conf.d/security.ini

# Configuration Apache
RUN { \
    echo '<VirtualHost *:80>'; \
    echo '    ServerAdmin admin@cybertech.local'; \
    echo '    DocumentRoot /var/www/html'; \
    echo '    '; \
    echo '    <Directory /var/www/html>'; \
    echo '        Options -Indexes +FollowSymLinks'; \
    echo '        AllowOverride All'; \
    echo '        Require all granted'; \
    echo '    </Directory>'; \
    echo '    '; \
    echo '    <Directory /var/www/html/includes>'; \
    echo '        Require all denied'; \
    echo '    </Directory>'; \
    echo '    '; \
    echo '    <Directory /var/www/html/database>'; \
    echo '        Require all denied'; \
    echo '    </Directory>'; \
    echo '    '; \
    echo '    ErrorLog ${APACHE_LOG_DIR}/error.log'; \
    echo '    CustomLog ${APACHE_LOG_DIR}/access.log combined'; \
    echo '    '; \
    echo '    # Security Headers'; \
    echo '    Header always set X-Frame-Options "SAMEORIGIN"'; \
    echo '    Header always set X-Content-Type-Options "nosniff"'; \
    echo '    Header always set X-XSS-Protection "1; mode=block"'; \
    echo '    Header always set Referrer-Policy "strict-origin-when-cross-origin"'; \
    echo '    Header unset Server'; \
    echo '    Header unset X-Powered-By'; \
    echo '</VirtualHost>'; \
} > /etc/apache2/sites-available/000-default.conf

# Copier les fichiers de l'application
COPY src/ /var/www/html/

# Définir les permissions correctes
RUN chown -R www-data:www-data /var/www/html \
    && chmod -R 755 /var/www/html \
    && chmod 750 /var/www/html/includes \
    && chmod 640 /var/www/html/includes/config.php

# Créer le répertoire des logs
RUN mkdir -p /var/log/php && chown www-data:www-data /var/log/php

# Exposer le port 80
EXPOSE 80

# Healthcheck
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
    CMD curl -f http://localhost/ || exit 1

# Démarrer Apache
CMD ["apache2-foreground"]