Docker Multi-Stage Build untuk Laravel Production: Panduan Bikin Image Super Ramping dan Aman

[ Stage 1: Frontend Builder (Node.js) ]
    Compile Tailwind/Vite  ──► Ekstrak: /public/build

[ Stage 2: Composer Builder (PHP CLI) ]
    composer install --no-dev  ──► Ekstrak: /vendor

                     │ (Hanya salin hasil akhir)
                     ▼
[ Stage 3: Production Runtime (PHP-FPM Minimal) ]
    Hanya berisi: PHP Runtime + Ekstensi + Source Code + /public/build + /vendor
    (Tanpa Node.js, tanpa compiler OS, tanpa git)

# =========================================================================
# STAGE 1: FRONTEND BUILDER (Node.js Stage)
# =========================================================================
# Tahap ini khusus meng-compile asset Vite, Tailwind CSS, atau JavaScript.
FROM node:20-alpine AS frontend-builder

WORKDIR /app

# Salin package definitions terlebih dahulu untuk memaksimalkan Docker layer caching
COPY package.json package-lock.json ./

# Install dependencies frontend secara bersih
RUN npm ci

# Salin source code yang dibutuhkan untuk proses build frontend
COPY resources/ ./resources/
COPY vite.config.js tailwind.config.js* postcss.config.js* ./
COPY public/ ./public/

# Jalankan proses kompilasi asset ke public/build
RUN npm run build


# =========================================================================
# STAGE 2: BACKEND DEPENDENCIES BUILDER (Composer Stage)
# =========================================================================
# Tahap ini khusus mengunduh paket vendor PHP tanpa dev-dependencies.
FROM composer:2 AS vendor-builder

WORKDIR /app

# Salin file manifesto Composer
COPY composer.json composer.lock ./

# Unduh paket PHP dengan flags optimasi production:
# - --no-dev: lewati paket testing (PHPUnit, Mockery, Faker, dsb)
# - --no-scripts: cegah artisan scripts jalan sebelum source code lengkap
# - --no-autoloader: tunda pembuatan autoloader sampai seluruh source code ada
# - --ignore-platform-reqs: hindari kegagalan build jika ekstensi sistem belum terpasang di stage ini
RUN composer install \
    --no-dev \
    --no-interaction \
    --no-plugins \
    --no-scripts \
    --prefer-dist \
    --optimize-autoloader


# =========================================================================
# STAGE 3: PRODUCTION RUNTIME (PHP-FPM Minimalist)
# =========================================================================
# Image final yang benar-benar akan dijalankan di server production.
FROM php:8.3-fpm-alpine AS production

# Label metadata untuk image tracking
LABEL maintainer="Engineering Team"
LABEL environment="production"

# Install ekstensi sistem level OS seminimal mungkin yang mutlak dibutuhkan runtime
# Menggunakan Alpine package manager (apk) agar ukuran image sangat kecil
RUN apk add --no-cache \
    libpng \
    libjpeg-turbo \
    freetype \
    libzip \
    oniguruma \
    icu-libs

# Install build dependencies sementara untuk kompilasi modul PHP, lalu langsung hapus build-deps nya
RUN apk add --no-cache --virtual .build-deps \
    $PHPIZE_DEPS \
    libpng-dev \
    libjpeg-turbo-dev \
    freetype-dev \
    libzip-dev \
    oniguruma-dev \
    icu-dev \
    && docker-php-ext-configure gd --with-freetype --with-jpeg \
    && docker-php-ext-install -j$(nproc) \
        pdo_mysql \
        mbstring \
        zip \
        bcmath \
        intl \
        opcache \
        gd \
    && apk del .build-deps

# Konfigurasi PHP Production & Opcache
RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"

# Terapkan tuning Opcache agresif untuk performa production
RUN { \
    echo 'opcache.memory_consumption=128'; \
    echo 'opcache.interned_strings_buffer=8'; \
    echo 'opcache.max_accelerated_files=10000'; \
    echo 'opcache.revalidate_freq=0'; \
    echo 'opcache.validate_timestamps=0'; \
    echo 'opcache.enable_cli=1'; \
    echo 'opcache.fast_shutdown=1'; \
} > /usr/local/etc/php/conf.d/opcache-recommended.ini

# Set direktori kerja
WORKDIR /var/www/html

# 1. Salin seluruh source code aplikasi Laravel
COPY . /var/www/html

# 2. Salin vendor PHP dari STAGE 2 (Composer Stage)
COPY --from=vendor-builder /app/vendor /var/www/html/vendor

# 3. Salin artefak frontend dari STAGE 1 (Node Stage)
COPY --from=frontend-builder /app/public/build /var/www/html/public/build

# 4. Ambil Composer binary sebentar untuk menghasilkan production classmap final
COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
RUN composer dump-autoload --optimize --classmap-authoritative --no-dev \
    && rm /usr/bin/composer

# Setup permission: serahkan kepemilikan file ke user standar www-data
RUN chown -R www-data:www-data /var/www/html \
    && chmod -R 775 /var/www/html/storage /var/www/html/bootstrap/cache

# Jalankan container menggunakan user non-root demi keamanan
USER www-data

EXPOSE 9000

CMD ["php-fpm"]

RUN apk add --no-cache --virtual .build-deps $PHPIZE_DEPS ... \
    && docker-php-ext-install ... \
    && apk del .build-deps

# Build image production
docker build -t laravel-app:prod -f Dockerfile.prod .

docker images | grep laravel-app

REPOSITORY    TAG     IMAGE ID       CREATED          SIZE
laravel-app   dev     a1b2c3d4e5f6   2 days ago       1.15GB
laravel-app   prod    f6e5d4c3b2a1   10 seconds ago   118MB

#!/bin/sh
set -e

# Cache konfigurasi, route, dan blade view agar booting framework instan
php artisan config:cache
php artisan route:cache
php artisan view:cache
php artisan event:cache

# Jalankan migrasi database otomatis (opsional, gunakan dengan hati-hati jika cluster multi-pod)
# php artisan migrate --force

# Eksekusi command utama (php-fpm)
exec "$@"

chmod +x docker/entrypoint.prod.sh

COPY docker/entrypoint.prod.sh /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/entrypoint.sh

ENTRYPOINT ["entrypoint.sh"]
CMD ["php-fpm"]