Merge pull request #7881 from pixelfed/staging

Staging

.env.docker.example

@@ -25,7 +25,7 @@ MAX_PHOTO_SIZE="15000"
 MAX_CAPTION_LENGTH="500"
 MAX_ALBUM_LENGTH="4"
 MEDIA_TYPES="image/jpeg,image/jpg,image/png,image/gif" # Accepted upload mime types. 
-MODERN_MEDIA_TYPES="image/avif,image/jxl,image/webp" # webp/avif/jxl require the vips driver.
+MODERN_MEDIA_TYPES="image/heic,image/heif,image/avif,image/jxl,image/webp" # webp/avif/jxl require the vips driver.
 
 # Instance URL Configuration
 # IMPORTANT: Update these with your actual domain
@@ -33,6 +33,18 @@ APP_URL="https://yourdomain.com"
 APP_DOMAIN="yourdomain.com"
 ADMIN_DOMAIN="yourdomain.com"
 SESSION_DOMAIN=null # Keep as null unless required for sharing session cookies with subdomains like SSO
+
+# TRUSTED_PROXY (Required)
+# Read by the serversideup FrankenPHP image.
+#   local (default)      - trust only private/Docker network ranges (X-Forwarded-For)
+#   cloudflare           - trust Cloudflare ranges (CF-Connecting-IP) + Docker networks
+#   sucuri               - trust Sucuri WAF ranges (X-Forwarded-For) + Docker networks
+#   off                  - disable trusted proxy handling
+TRUSTED_PROXY="local"
+
+# Trusted Proxies (Don't touch)
+# TRUST_PROXIES is read by Laravel's TrustProxies middleware. The serversideup web server (Caddy) 
+# already validates the proxy before the request reaches PHP via the TRUSTED_PROXY value.
 TRUST_PROXIES="*"
 
 # Database Configuration

bootstrap/app.php

@@ -69,6 +69,7 @@ return Application::configure(basePath: dirname(__DIR__))
         },
         channels: __DIR__.'/../routes/channels.php',
         commands: __DIR__.'/../routes/console.php',
+        health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware) {
         $middleware->use([

docker-compose.yml

@@ -50,9 +50,12 @@ services:
     env_file:
       - .env
     environment:
+      HEALTHCHECK_PATH: "/up"
+      LOG_OUTPUT_LEVEL: "error"
+      
       # SSL Configuration (handled by reverse proxy)
       SSL_MODE: "off"
-      LOG_OUTPUT_LEVEL: "error"
+      
       # TODO: Once the new webui is completed, we will try to handle the service worker cache on that side.
       CADDY_SERVER_EXTRA_DIRECTIVES: |
         @service_worker path /sw.js
@@ -62,6 +65,7 @@ services:
       PHP_POST_MAX_SIZE: "500M"
       PHP_UPLOAD_MAX_FILE_SIZE: "500M"
       PHP_OPCACHE_ENABLE: "1"
+      PHP_OPCACHE_VALIDATE_TIMESTAMPS: "0"
       
       # Laravel Auto-run Configuration
       AUTORUN_ENABLED: "true"
@@ -72,12 +76,17 @@ services:
       AUTORUN_LARAVEL_ROUTE_CACHE: "true"
       AUTORUN_LARAVEL_VIEW_CACHE: "true"
       AUTORUN_LARAVEL_CONFIG_CACHE: "true"
-
     volumes:
       - ./storage:/var/www/html/storage
     depends_on:
       - db
       - redis
+    healthcheck:
+      test: ["CMD", "healthcheck-frankenphp"]
+      interval: 10s
+      timeout: 5s
+      retries: 3
+      start_period: 30s
     networks:
       - pixelfed-network
 
@@ -91,6 +100,19 @@ services:
     env_file:
       - .env
     environment:
+      #HORIZON_SUPERVISOR_MEMORY: 64  # MB per queue worker
+      #HORIZON_MAX_PROCESSES: 10  # User-facing federation delivery (follows, deletes, DMs), inbox processing, and push notifications.
+      #HORIZON_DELIVER_MAX_PROCESSES: 6  # ?
+      #HORIZON_MEDIA_MAX_PROCESSES: 4  # Image/video optimization, resizing, and thumbnail generation (the `mmo` queue).
+      #HORIZON_FANOUT_MAX_PROCESSES: 6  # Timeline/story/group fanout writes triggered by posts, likes, and follows.
+      #HORIZON_BACKGROUND_MAX_PROCESSES: 4  # Imports, instance crawling, account deletion/migration, and other maintenance work that isn't user-facing time-sensitive.
+      
+      # PHP Configuration
+      PHP_POST_MAX_SIZE: "500M"
+      PHP_UPLOAD_MAX_FILE_SIZE: "500M"
+      PHP_OPCACHE_ENABLE: "1"
+      PHP_OPCACHE_VALIDATE_TIMESTAMPS: "0"
+      
       # Laravel Auto-run Configuration
       AUTORUN_ENABLED: "false"
       AUTORUN_LARAVEL_MIGRATION: "false"
@@ -100,16 +122,13 @@ services:
       AUTORUN_LARAVEL_ROUTE_CACHE: "false"
       AUTORUN_LARAVEL_VIEW_CACHE: "false"
       AUTORUN_LARAVEL_CONFIG_CACHE: "true"
-      PHP_POST_MAX_SIZE: "500M"
-      PHP_UPLOAD_MAX_FILE_SIZE: "500M"
-      PHP_OPCACHE_ENABLE: "1"
     volumes:
       - ./storage:/var/www/html/storage
     depends_on:
       - db
       - redis
     healthcheck:
-      test: ["CMD", "php", "artisan", "horizon:status"]
+      test: ["CMD", "healthcheck-horizon"]
       interval: 10s
       timeout: 5s
       retries: 3
@@ -127,6 +146,12 @@ services:
     env_file:
       - .env
     environment:
+      # PHP Configuration
+      PHP_POST_MAX_SIZE: "500M"
+      PHP_UPLOAD_MAX_FILE_SIZE: "500M"
+      PHP_OPCACHE_ENABLE: "1"
+      PHP_OPCACHE_VALIDATE_TIMESTAMPS: "0"
+      
       # Laravel Auto-run Configuration
       AUTORUN_ENABLED: "false"
       AUTORUN_LARAVEL_MIGRATION: "false"
@@ -136,9 +161,6 @@ services:
       AUTORUN_LARAVEL_ROUTE_CACHE: "false"
       AUTORUN_LARAVEL_VIEW_CACHE: "false"
       AUTORUN_LARAVEL_CONFIG_CACHE: "true"
-      PHP_POST_MAX_SIZE: "500M"
-      PHP_UPLOAD_MAX_FILE_SIZE: "500M"
-      PHP_OPCACHE_ENABLE: "1"
     volumes:
       - ./storage:/var/www/html/storage
     depends_on:
@@ -146,6 +168,9 @@ services:
       - redis
     healthcheck:
       test: ["CMD", "healthcheck-schedule"]
+      interval: 10s
+      timeout: 5s
+      retries: 3
       start_period: 10s
     networks:
       - pixelfed-network