initial 3.0 commit

.docker/apache-default.conf

@@ -0,0 +1,63 @@
+LoadModule remoteip_module modules/mod_remoteip.so
+LoadModule rewrite_module modules/mod_rewrite.so
+
+ServerTokens Prod
+LogLevel warn
+
+# Filter out AWS health check access logs
+SetEnvIf Request_Method "^GET$" METHOD_GET=1
+SetEnvIf User-Agent "^Amazon-Route53-Health-Check-Service" HEALTH_CHECK_UA=1
+SetEnvIf User-Agent "^ELB-HealthChecker" HEALTH_CHECK_UA=1
+SetEnvIf Request_URI "^/ping$" HEALTH_CHECK_URI=1
+SetEnvIf Request_URI "^/user/login$" HEALTH_CHECK_URI=1
+# Filter out internal dummy connections: https://cwiki.apache.org/confluence/display/HTTPD/InternalDummyConnection
+SetEnvIf Remote_Addr "127\.0\.0\.1" LOOPBACK=1
+SetEnvIf Remote_Addr "::1" LOOPBACK=1
+
+
+# Also listening on port 8000 so that local environments can reference themselves (e.g. PDF printing)
+Listen 8000
+<VirtualHost *:80>
+	ServerName ${ADDRESS}
+	DocumentRoot /var/www/html/web
+	RemoteIPHeader X-Forwarded-For
+	RemoteIPInternalProxy 10.0.0.0/16
+	ServerSignature Off
+	Header set Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"
+	Header set X-XSS-Protection "1; mode=block"
+	Header set X-Content-Type-Options nosniff
+	Header unset x-generator
+
+	<Directory /var/www/html/web>
+		AllowOverride All
+		Require all granted
+		SetEnvIf X-Forwarded-Proto "^https$" HTTPS
+		php_value upload_max_filesize 512M
+		php_value post_max_size 512M
+		php_value memory_limit 512M
+		php_value max_execution_time 60
+		php_flag display_errors Off
+		Require all granted
+		SetEnvIf X-Forwarded-Proto "^https$" HTTPS
+		AddType application/manifest+json		webmanifest
+		Redirect 403 "/core/install.php"
+	</Directory>
+
+	<Location /simplesaml/module.php/core/loginuserpass.php>
+		Order deny,allow
+		Deny from all
+	</Location>
+
+	SetEnv SIMPLESAMLPHP_CONFIG_DIR /var/www/html/simplesamlphp_config/config
+	Alias /simplesaml /var/www/html/simplesamlphp/www
+	<Directory /var/www/html/simplesamlphp/www>
+		Require all granted
+		SetEnvIf X-Forwarded-Proto "^https$" HTTPS
+	</Directory>
+</VirtualHost>
+
+ErrorLog /dev/stdout
+# Skip logging AWS health check requests (user agent, HTTP method and URI check) or apache internal dummy connections (loopback)
+CustomLog /dev/stdout combined "expr=!((-n reqenv('HEALTH_CHECK_UA') && -n reqenv('HEALTH_CHECK_URI') && -n reqenv('METHOD_GET')) || -n reqenv('LOOPBACK'))"
+
+# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

.docker/docker-php-ext-xdebug.ini

@@ -0,0 +1,11 @@
+[xdebug]
+zend_extension = xdebug.so
+xdebug.default_enable=1
+xdebug.mode = debug
+xdebug.client_port=9003
+xdebug.start_with_request=yes
+; no need for remote host
+xdebug.discover_client_host = 1
+xdebug.client_host = host.docker.internal
+xdebug.idekey=IDEA_DEBUG
+xdebug.output_dir=/mnt/files/

.docker/entrypoint-dev.sh

@@ -0,0 +1,12 @@
+#!/bin/sh
+
+if [ "${ENABLE_XDEBUG}" = true ]; then
+  echo "Enabling xdebug..."
+  cp /dev-tools/docker-php-ext-xdebug.ini /etc/php7/conf.d/docker-php-ext-xdebug.ini
+else
+  echo "Disabling xdebug..."
+  rm /etc/php7/conf.d/docker-php-ext-xdebug.ini 2>&1 > /dev/null
+fi
+
+echo "Starting httpd..."
+httpd -DFOREGROUND

.docker/php.ini

@@ -0,0 +1,5 @@
+[PHP]
+expose_php = Off
+memory_limit = 512M
+upload_max_filesize = 256M
+

.docker/php.opcache.ini

@@ -0,0 +1,11 @@
+[opcache]
+opcache.enable=1
+; 0 means it will check on every request
+; 0 is irrelevant if opcache.validate_timestamps=0 which is desirable in production
+opcache.revalidate_freq=0
+opcache.validate_timestamps=${PHP_OPCACHE_VALIDATE_TIMESTAMPS}
+opcache.max_accelerated_files=10000
+opcache.memory_consumption=192
+opcache.max_wasted_percentage=10
+opcache.interned_strings_buffer=16
+

.docker/unit.conf.json

@@ -0,0 +1,148 @@
+{
+    "listeners": {
+        "*:80": {
+            "pass": "routes"
+        }
+    },
+
+    "routes": [
+        {
+            "match": {
+                "uri": [
+                    "!*/.well-known/*",
+                    "/vendor/*",
+                    "/core/profiles/demo_umami/modules/demo_umami_content/default_content/*",
+                    "*.engine",
+                    "*.inc",
+                    "*.install",
+                    "*.make",
+                    "*.module",
+                    "*.po",
+                    "*.profile",
+                    "*.sh",
+                    "*.theme",
+                    "*.tpl",
+                    "*.twig",
+                    "*.xtmpl",
+                    "*.yml",
+                    "*/.*",
+                    "*/Entries*",
+                    "*/Repository",
+                    "*/Root",
+                    "*/Tag",
+                    "*/Template",
+                    "*/composer.json",
+                    "*/composer.lock",
+                    "*/web.config",
+                    "*sql",
+                    "*.bak",
+                    "*.orig",
+                    "*.save",
+                    "*.swo",
+                    "*.swp",
+                    "*~"
+                ]
+            },
+
+            "action": {
+                "return": 404
+            }
+        },
+        {
+            "match": {
+                "uri": [
+                    "/core/authorize.php",
+                    "/core/core.api.php",
+                    "/core/globals.api.php",
+                    "/core/install.php",
+                    "/core/modules/statistics/statistics.php",
+                    "/core/modules/system/tests/http.php*",
+                    "/core/modules/system/tests/https.php*",
+                    "/core/rebuild.php",
+                    "/update.php"
+                ]
+            },
+
+            "action": {
+                "pass": "applications/drupal/direct"
+            }
+        },
+        {
+            "match": {
+                "uri": [
+                    "!/index.php*",
+                    "*.php"
+                ]
+            },
+
+            "action": {
+                "return": 404
+            }
+        },
+        {
+            "match": {
+                "uri": [
+                    "/simplesaml"
+                ]
+            },
+
+            "action": {
+                "pass": "applications/simplesaml"
+            }
+        },
+        {
+            "action": {
+                "share": "/app/web/",
+                "fallback": {
+                    "pass": "applications/drupal/index"
+                }
+            }
+        }
+    ],
+
+    "applications": {
+        "drupal": {
+            "type": "php",
+            "processes": {
+              "max": 10,
+              "spare": 5,
+              "idle_timeout": 20
+            },
+            "limits": {
+              "timeout": 30,
+              "requests": 1000
+            },
+            "options": {
+                "file": "/etc/php7/php.ini",
+                "admin": {
+                    "memory_limit": "512M",
+                    "variables_order": "EGPCS",
+                    "expose_php": "0"
+                },
+                "user": {
+                    "display_errors": "0"
+                }
+            },
+            "targets": {
+                "direct": {
+                    "root": "/app/web/"
+                },
+
+                "index": {
+                    "root": "/app/web/",
+                    "script": "index.php"
+                }
+            }
+        },
+
+        "simplesaml": {
+            "type": "php",
+            "root": "/app/simplesamlphp/www",
+            "script": "index.php",
+            "environment": {
+                "SIMPLESAMLPHP_CONFIG_DIR": "/app/simplesamlphp_config/config"
+            }
+        }
+    }
+}
+

.dockerignore

@@ -0,0 +1,25 @@
+.env
+.env.example
+.ssh
+.tugboat
+.git/
+.gitignore
+.gitattributes
+.travis.yml
+.editorconfig
+Makefile
+*.md
+admin_api/lambda_functions/
+admin_api/cloud_formation_templates/
+behat.yml
+drush/
+features/
+Dockerfile
+docker/
+docker.mk
+scripts/
+postman/
+readme/
+docker-compose*
+docker-sync*
+*.sql

.editorconfig

@@ -0,0 +1,17 @@
+# Drupal editor configuration normalization
+# @see http://editorconfig.org/
+
+# This is the top-most .editorconfig file; do not search in parent directories.
+root = true
+
+# All files.
+[*]
+end_of_line = LF
+indent_style = space
+indent_size = 2
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[composer.{json,lock}]
+indent_size = 4