Public Repository

Last pushed: 2 months ago
Short Description
fork of richarvey/nginx-php-fpm:php7
Full Description

Used to pull git repositories. Letsencrypt and composer have been removed. git repository has everything needed and running through AWS loadbalancer that has its own cert management.


SOAP works.
Secured cookies in php.ini
Added location = /healthcheck.php with access_log off;
Added chown -R nginx /session in to set permissions on volume /session for volumes from or AWS EFS
Added tzdata and ntp to set timezone and keep time synced


This is a Dockerfile to build a container image for nginx and php-fpm, with the ability to pull website code from git. The container also has the ability to update templated files with variables passed to docker in order to update your settings.
The source files for this project can be found here:

If you have any improvements please submit a pull request.
Docker hub repository

The Docker hub build can be found here:
Tag Nginx PHP Alpine
latest 1.11.3 5.6.26 3.4
php5 1.11.3 5.6.26 3.4
php7 1.11.3 7.0.11 3.4
Building from source

To build from source you need to clone the git repo and run docker build:

git clone
docker build -t nginx-php-fpm:latest .

Pulling from Docker Hub

docker pull richarvey/nginx-php-fpm


To simply run the container:

sudo docker run -d richarvey/nginx-php-fpm

You can then browse to http://<DOCKER_HOST> to view the default install files. To find your DOCKER_HOST use the docker inspect to get the IP address.
Available Configuration Parameters

The following flags are a list of all the currently supported options that can be changed by passing in the variables to docker with the -e flag.

GIT_REPO : URL to the repository containing your source code. If you are using a personal token, this is the https URL without https://, e.g for ssh prepend with git@ e.g
GIT_BRANCH : Select a specific branch (optional)
GIT_EMAIL : Set your email for code pushing (required for git to work)
GIT_NAME : Set your name for code pushing (required for git to work)
SSH_KEY : Private SSH deploy key for your repository base64 encoded (requires write permissions for pushing)
GIT_PERSONAL_TOKEN : Personal access token for your git account (required for HTTPS git access)
GIT_USERNAME : Git username for use with personal tokens. (required for HTTPS git access)
WEBROOT : Change the default webroot directory from /var/www/html to your own setting
ERRORS : Set to 1 to display PHP Errors in the browser
HIDE_NGINX_HEADERS : Disable by setting to 0, default behaviour is to hide nginx + php version in headers
PHP_MEM_LIMIT : Set higher PHP memory limit, default is 128 Mb
PHP_POST_MAX_SIZE : Set a larger post_max_size, default is 100 Mb
PHP_UPLOAD_MAX_FILESIZE : Set a larger upload_max_filesize, default is 100 Mb
DOMAIN : Set domain name for Lets Encrypt scripts
RUN_SCRIPTS : Set to 1 to execute scripts
TIME_ZONE:  set timezone  ie America/Chicago  Time is kept up-to-date using ntp /etc/periodic/daily/do-ntp

Dynamically Pulling code from git

One of the nice features of this container is its ability to pull code from a git repository with a couple of environmental variables passed at run time. Please take a look at our recommended repo layout guidelines.

There are two methods of pulling code from git, you can either use a Personal Token (recommended method) or an SSH key.

Note: We would recommend using a git personal token over an SSH key as it simplifies the set up process. To create a personal access token on Github follow this guide.
Personal Access token

You can pass the container your personal access token from your git account using the GIT_PERSONAL_TOKEN flag. This token must be setup with the correct permissions in git in order to push and pull code.

Since the access token acts as a password with limited access, the git push/pull uses HTTPS to authenticate. You will need to specify your GIT_USERNAME and GIT_PERSONAL_TOKEN variables to push and pull. You'll need to also have the GIT_EMAIL, GIT_NAME and GIT_REPO common variables defined.

docker run -d -e 'GIT_EMAIL=email_address' -e 'GIT_NAME=full_name' -e 'GIT_USERNAME=git_username' -e '' -e 'GIT_PERSONAL_TOKEN=<long_token_string_here>' richarvey/nginx-php-fpm:latest

To pull a repository and specify a branch add the GIT_BRANCH environment variable:

docker run -d -e 'GIT_EMAIL=email_address' -e 'GIT_NAME=full_name' -e 'GIT_USERNAME=git_username' -e '' -e 'GIT_PERSONAL_TOKEN=<long_token_string_here>' -e 'GIT_BRANCH=stage' richarvey/nginx-php-fpm:latest

SSH keys
Preparing your SSH key

The container has the option for you to pass it the SSH_KEY variable with a base64 encoded private key. First generate your key and then make sure to add it to github and give it write permissions if you want to be able to push code from the container. Then run:

base64 -w 0 /path_to_your_key

Note: Copy the output, but be careful not to copy your prompt
Running with SSH Keys

To run the container and pull code simply specify the GIT_REPO URL including git@ and then make sure you have also supplied your base64 version of your ssh deploy key:

sudo docker run -d -e 'GIT_NAME=full_name' -e 'GIT_USERNAME=git_username' -e '' -e 'SSH_KEY=BIG_LONG_BASE64_STRING_GOES_IN_HERE' richarvey/nginx-php-fpm:latest

To pull a repository and specify a branch add the GIT_BRANCH environment variable:

sudo docker run -d -e 'GIT_NAME=full_name' -e 'GIT_USERNAME=git_username' -e '' -e 'SSH_KEY=BIG_LONG_BASE64_STRING_GOES_IN_HERE' -e 'GIT_BRANCH=stage' richarvey/nginx-php-fpm:latest

Custom Nginx Config files

Sometimes you need a custom config file for nginx to achieve this read the Nginx config guide
Scripting and Templating

Special Git Features
auto updates with git branch every 1 minute.

Specify the GIT_EMAIL and GIT_NAME variables for this to work. They are used to set up git correctly and allow the following commands to work.
Push code to Git

To push code changes made within the container back to git run:

sudo docker exec -t -i <CONTAINER_NAME> /usr/bin/push

Pull code from Git (Refresh)

In order to refresh the code in a container and pull newer code from git run:

sudo docker exec -t -i <CONTAINER_NAME> /usr/bin/pull

Logging and Errors

All logs should now print out in stdout/stderr and are available via the docker logs command:

docker logs <CONTAINER_NAME>


You can set your webroot in the container to anything you want using the WEBROOT variable e.g -e "WEBROOT=/var/www/html/public". By default code is checked out into /var/www/html/ so if your git repository does not have code in the root you'll need to use this variable.

Docker Pull Command