flake.nix

flake.nix

```nix
packages = let
  src = ./.;
  php = pkgs.php81;
in {
  app = php.buildComposerProject {
    inherit src;

    pname = "app-demo";
    version = "1.0.0";

    vendorHash = "sha256-SrE51k3nC5idaDHNxiNM7NIbIERIf8abrCzFEdxOQWA=";
  };

  oci-image = let
    webroot = "${app}/share/php/app-demo/public";

    caddyFile = pkgs.writeText "Caddyfile" ''
    {
        email [email protected]
    }

    :80 {
        root * ${webroot}
        log
        encode gzip
        php_fastcgi 127.0.0.1:9000
        file_server
    }

    :443 {
        root * ${webroot}
        log
        encode gzip
        php_fastcgi 127.0.0.1:9000
        file_server
        tls internal {
            on_demand
        }
    }
    '';
  in
  pkgs.dockerTools.buildLayeredImage {
    name = self'.packages.app.pname;
    tag = "latest";

    contents = [
      php
      pkgs.caddy
      pkgs.dockerTools.caCertificates
      pkgs.fakeNss
      (pkgs.writeScriptBin "start-server" ''
        #!${pkgs.runtimeShell}
        php-fpm -D -y /etc/php-fpm.d/www.conf.default
        caddy run --adapter caddyfile --config ${caddyFile}
      '')
    ];

    extraCommands = ''
      mkdir -p tmp
      chmod 1777 tmp
    '';

    config = {
      Cmd = [ "start-server" ];
      ExposedPorts = {
        "80/tcp" = {};
        "443/tcp" = {};
      };
    };
};
```