.env.example

###########################################################
###################### General Setup ######################
###########################################################

### Paths #################################################

APP_CODE_PATH_HOST=../projects
APP_CODE_PATH_CONTAINER=/var/www/projects
APP_CODE_CONTAINER_FLAG=:cached
DATA_PATH_HOST=~/.ivpldock/data

### Drivers ################################################

VOLUMES_DRIVER=local
NETWORKS_DRIVER=bridge

### Docker compose files ##################################

COMPOSE_FILE=docker-compose.yml
COMPOSE_PATH_SEPARATOR=:
COMPOSE_PROJECT_NAME=ivpldock

### PHP Version ###########################################

PHP_VERSION=8.4
WORKSPACE_INSTALL_XDEBUG=true
WORKSPACE_XDEBUG_PORT=9003
WORKSPACE_INSTALL_PCOV=true

### Docker Host IP ########################################

DOCKER_HOST_IP=10.0.75.1

### Remote Interpreter ####################################

PHP_IDE_CONFIG=serverName=ivpldock

### Environment ###########################################

CHANGE_SOURCE=false
COMPOSE_CONVERT_WINDOWS_PATHS=1

###########################################################
################ Containers Customization #################
###########################################################

### WORKSPACE #############################################

WORKSPACE_BASE_IMAGE_TAG_PREFIX=latest
WORKSPACE_ALLOW_RELEASE_INFO_CHANGE=false
WORKSPACE_COMPOSER_GLOBAL_INSTALL=true
WORKSPACE_COMPOSER_VERSION=2
WORKSPACE_INSTALL_NODE=true
WORKSPACE_INSTALL_YARN=true
WORKSPACE_YARN_VERSION=latest
WORKSPACE_INSTALL_NPM_GULP=true
WORKSPACE_INSTALL_NPM_VUE_CLI=true
WORKSPACE_INSTALL_PHPREDIS=true
# Headless Chrome/Chromium for browser-driven tooling and tests (Dusk,
# Panther, Puppeteer, Browsershot, ...). Installs google-chrome-stable from
# Google's apt repo, symlinked as `chromium`. amd64 only.
WORKSPACE_INSTALL_CHROMIUM=true
# Puppeteer npm package (global) — the Node launcher Spatie Browsershot
# require()s. Needs WORKSPACE_INSTALL_CHROMIUM=true; reuses that Chrome
# binary instead of downloading its own (PUPPETEER_SKIP_DOWNLOAD).
WORKSPACE_INSTALL_PUPPETEER=true
# Passed through to the workspace container's environment for consuming
# projects (e.g. InvoicePlane's own IP_BROWSERSHOT_NO_SANDBOX), which uses
# it to decide whether to pass Chrome's --no-sandbox flag to Puppeteer.
#
# false (Chrome's own sandbox enabled): Chrome tries to create its own
#   PID/network namespaces for defense-in-depth against a compromised
#   renderer process. This container doesn't grant that (no SYS_ADMIN /
#   user-namespace privileges — deliberately, since granting them would
#   weaken the container's own isolation from the host, a bigger blast
#   radius than what the Chrome sandbox buys back). Result: Chrome fails
#   outright with "Failed to move to new namespace", so every Browsershot
#   call throws and PDF rendering never works. Not "safer", just broken.
# true (--no-sandbox passed to Chrome): Chrome skips its own OS-level
#   sandboxing and Browsershot/Puppeteer actually works. This is the
#   standard, widely-documented way to run headless Chrome in Docker,
#   since the container boundary is already the isolation layer here —
#   Chrome's sandbox would mostly be trying to protect a boundary
#   (process-to-process within one container) not otherwise enforced.
#   The residual risk (a compromised renderer gets fewer OS-level
#   restrictions within this container) is acceptable for a local
#   dev/CI stack rendering internally-generated HTML, not arbitrary
#   third-party content.
#
# Recommended: true (this is the only setting under which the feature
# works at all in this container).
IP_BROWSERSHOT_NO_SANDBOX=true
WORKSPACE_PUID=1000
WORKSPACE_PGID=1001
WORKSPACE_TIMEZONE=UTC
WORKSPACE_INSTALL_DNSUTILS=true
WORKSPACE_INSTALL_JDK=true

### PHP_FPM ###############################################

PHP_FPM_BASE_IMAGE_TAG_PREFIX=latest
PHP_FPM_INSTALL_BCMATH=true
PHP_FPM_INSTALL_MYSQLI=true
PHP_FPM_INSTALL_INTL=true
PHP_FPM_INSTALL_IMAGEMAGICK=true
PHP_FPM_IMAGEMAGICK_VERSION=latest
PHP_FPM_INSTALL_OPCACHE=true
PHP_FPM_INSTALL_IMAGE_OPTIMIZERS=true
PHP_FPM_INSTALL_PHPREDIS=true
PHP_FPM_INSTALL_XDEBUG=true
PHP_FPM_XDEBUG_PORT=9003
PHP_FPM_PUID=1000
PHP_FPM_PGID=1001

### PHP_WORKER ############################################

PHP_WORKER_INSTALL_INTL=true
PHP_WORKER_PUID=1000
PHP_WORKER_PGID=1001

### NGINX #################################################

NGINX_HOST_HTTP_PORT=80
NGINX_HOST_HTTPS_PORT=443
NGINX_HOST_LOG_PATH=./logs/nginx/
NGINX_SITES_PATH=./sites/
NGINX_PHP_UPSTREAM_CONTAINER=php-fpm
NGINX_PHP_UPSTREAM_PORT=9000
NGINX_SSL_PATH=./nginx/ssl/

### MARIADB ###############################################

MARIADB_VERSION=10.11
MARIADB_DATABASE=default
MARIADB_USER=default
MARIADB_PASSWORD=secret
MARIADB_PORT=3306
MARIADB_ROOT_PASSWORD=root
MARIADB_ENTRYPOINT_INITDB=./.docker/mariadb/docker-entrypoint-initdb.d

### REDIS #################################################

REDIS_PORT=6379
REDIS_PASSWORD=secret_redis

### PHP MY ADMIN ##########################################

PMA_DB_ENGINE=mariadb
PMA_USER=default
PMA_PASSWORD=secret
PMA_ROOT_PASSWORD=secret
PMA_PORT=8081
PMA_MAX_EXECUTION_TIME=600
PMA_MEMORY_LIMIT=256M
PMA_UPLOAD_LIMIT=2G