01-init.config

option_settings:
  aws:elasticbeanstalk:application:environment:
    APP_ENV: prod

commands:
    01_update_composer:
        command: export COMPOSER_HOME=/root && /usr/bin/composer.phar self-update
    02_setvars:
        command: /opt/elasticbeanstalk/bin/get-config environment | jq -r 'to_entries | .[] | "export \(.key)=\"\(.value)\""' > /etc/profile.d/sh.local

packages:
    yum:
        jq: []

03-main.config

container_commands:
  98envlocal:
    command: |
      /opt/elasticbeanstalk/bin/get-config environment | jq -r 'to_entries | .[] | "\(.key)=\(.value)"' > /var/app/staging/.env.local
  99migration:
    leader_only: true
    command: |
      bin/console doctrine:database:create --if-not-exists --no-interaction \
      && bin/console doctrine:migrations:migrate --no-interaction

option_settings:
  aws:elasticbeanstalk:application:environment:
    COMPOSER_HOME: /root
  aws:elasticbeanstalk:container:php:phpini:
    composer_options: "--optimize-autoloader --no-dev --apcu-autoloader --classmap-authoritative"
  aws:elasticbeanstalk:container:php:phpini:
      document_root: /public

php.conf

root /var/app/current/public;
client_max_body_size 20M;

add_header X-Frame-Options sameorigin;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";

location / {
    # try to serve file directly, fallback to index.php
    try_files $uri /index.php$is_args$args;
}

# optionally disable falling back to PHP script for the asset directories;
# nginx will return a 404 error when files are not found instead of passing the
# request to Symfony (improves performance but Symfony's 404 page is not displayed)
# location /bundles {
#     try_files $uri =404;
# }

location ~* \.(?:ico|css|js|gif|webp|jpe?g|png|svg|woff|woff2|eot|ttf|mp4)$ {
    # try to serve file directly, fallback to index.php
    try_files $uri /index.php$is_args$args;
    access_log off;
    expires 1y;
    add_header Pragma public;
    add_header Cache-Control "public";
}

location ~ ^/index.php(/|$) {
    include /etc/nginx/fastcgi_params;
    fastcgi_pass php-fpm;
    fastcgi_split_path_info ^(.+\.php)(/.*)$;
    fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
    fastcgi_param DOCUMENT_ROOT $realpath_root;

    # fastcgi_param HTTPS on; # forcing https

    internal;
}

# return 404 for all other php files not matching the front controller
# this prevents access to other php files you don't want to be accessible.
location ~ \.php$ {
    return 404;
}