mirror of
https://github.com/hoellen/docker-nextcloud.git
synced 2026-06-15 12:50:24 +00:00
chore: update PHP to 8.5
This commit is contained in:
+1
-2
@@ -1,6 +1,6 @@
|
|||||||
# -------------- Build-time variables --------------
|
# -------------- Build-time variables --------------
|
||||||
ARG NEXTCLOUD_VERSION=34.0.0
|
ARG NEXTCLOUD_VERSION=34.0.0
|
||||||
ARG PHP_VERSION=8.4
|
ARG PHP_VERSION=8.5
|
||||||
ARG NGINX_VERSION=1.30
|
ARG NGINX_VERSION=1.30
|
||||||
|
|
||||||
ARG ALPINE_VERSION=3.23
|
ARG ALPINE_VERSION=3.23
|
||||||
@@ -62,7 +62,6 @@ RUN apk -U upgrade \
|
|||||||
bz2 \
|
bz2 \
|
||||||
intl \
|
intl \
|
||||||
ldap \
|
ldap \
|
||||||
opcache \
|
|
||||||
pcntl \
|
pcntl \
|
||||||
pdo_mysql \
|
pdo_mysql \
|
||||||
pdo_pgsql \
|
pdo_pgsql \
|
||||||
|
|||||||
@@ -1,4 +1,3 @@
|
|||||||
zend_extension=opcache.so
|
|
||||||
opcache.enable=1
|
opcache.enable=1
|
||||||
opcache.enable_cli=1
|
opcache.enable_cli=1
|
||||||
opcache.memory_consumption=<OPCACHE_MEM_SIZE>
|
opcache.memory_consumption=<OPCACHE_MEM_SIZE>
|
||||||
|
|||||||
@@ -15,7 +15,10 @@ sp.harden_random.enable();
|
|||||||
|
|
||||||
# Globally activate strict mode
|
# Globally activate strict mode
|
||||||
# https://www.php.net/manual/en/language.types.declarations.php#language.types.declarations.strict
|
# https://www.php.net/manual/en/language.types.declarations.php#language.types.declarations.strict
|
||||||
sp.global_strict.enable();
|
# Disabled: PHP 8.5 expanded strict_types=1 to reject implicit object->string
|
||||||
|
# coercion via __toString(). This breaks symfony/console Helper::substr() which
|
||||||
|
# returns UnicodeString from a :string method. No per-file exclusion available.
|
||||||
|
# sp.global_strict.enable();
|
||||||
|
|
||||||
# Prevent unserialize-related exploits
|
# Prevent unserialize-related exploits
|
||||||
# sp.unserialize_hmac.enable();
|
# sp.unserialize_hmac.enable();
|
||||||
@@ -34,7 +37,7 @@ sp.sloppy_comparison.enable();
|
|||||||
# https://snuffleupagus.readthedocs.io/features.html#protection-against-cross-site-request-forgery
|
# https://snuffleupagus.readthedocs.io/features.html#protection-against-cross-site-request-forgery
|
||||||
sp.cookie.name("PHPSESSID").samesite("lax");
|
sp.cookie.name("PHPSESSID").samesite("lax");
|
||||||
|
|
||||||
# Nextcloud whitelist (tested with Nextcloud 27.0.1)
|
# Nextcloud whitelist (tested with Nextcloud 34.0.0)
|
||||||
sp.disable_function.function("function_exists").param("function").value("proc_open").filename("/nextcloud/3rdparty/symfony/console/Terminal.php").allow();
|
sp.disable_function.function("function_exists").param("function").value("proc_open").filename("/nextcloud/3rdparty/symfony/console/Terminal.php").allow();
|
||||||
sp.disable_function.function("function_exists").param("function").value("exec").filename("/nextcloud/lib/private/legacy/OC_Helper.php").allow();
|
sp.disable_function.function("function_exists").param("function").value("exec").filename("/nextcloud/lib/private/legacy/OC_Helper.php").allow();
|
||||||
sp.disable_function.function("function_exists").param("function").value("exec").filename("/nextcloud/lib/public/Util.php").allow();
|
sp.disable_function.function("function_exists").param("function").value("exec").filename("/nextcloud/lib/public/Util.php").allow();
|
||||||
|
|||||||
Reference in New Issue
Block a user