FROM debian:bookworm-slim

# PHP 7.4 from deb.sury.org: the official php:7.4-apache image is frozen at 7.4.33
# (2022), while sury keeps backporting security fixes (e.g. CVE-2026-109618/109619)
ENV DEBIAN_FRONTEND=noninteractive
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    gnupg \
 && curl -fsSL https://packages.sury.org/php/apt.gpg -o /usr/share/keyrings/sury-php.gpg \
 && echo "deb [signed-by=/usr/share/keyrings/sury-php.gpg] https://packages.sury.org/php/ bookworm main" \
    > /etc/apt/sources.list.d/sury-php.list \
 && rm -rf /var/lib/apt/lists/*

# Install Apache, PHP 7.4 with the extensions Moodle needs, and tools
RUN apt-get update && apt-get install -y --no-install-recommends \
    apache2 \
    libapache2-mod-php7.4 \
    php7.4-cli \
    php7.4-curl \
    php7.4-gd \
    php7.4-imagick \
    php7.4-intl \
    php7.4-mbstring \
    php7.4-mysql \
    php7.4-opcache \
    php7.4-readline \
    php7.4-redis \
    php7.4-soap \
    php7.4-sqlite3 \
    php7.4-xml \
    php7.4-xmlrpc \
    php7.4-zip \
    git \
    unzip \
    nano \
    wget \
    cron \
 && rm -rf /var/lib/apt/lists/* \
 && ln -s /usr/bin/php7.4 /usr/local/bin/php

# Apache: same behaviour as the official php:apache image
COPY apache-php.conf /etc/apache2/conf-available/docker-php.conf
RUN a2enconf docker-php \
 && a2enmod rewrite headers \
 && ln -sfT /dev/stdout /var/log/apache2/access.log \
 && ln -sfT /dev/stderr /var/log/apache2/error.log \
 && ln -sfT /dev/stdout /var/log/apache2/other_vhosts_access.log

# Install Moosh 1.25 (same release as the old moodle.org zip, which is gone)
RUN git clone -q --depth 1 -b 1.25 https://github.com/tmuras/moosh.git /opt/moosh && \
    curl -fsSL https://getcomposer.org/download/2.2.25/composer.phar -o /tmp/composer.phar && \
    cd /opt/moosh && php /tmp/composer.phar install -q --no-dev --no-interaction && \
    rm /tmp/composer.phar && \
    ln -s /opt/moosh/moosh.php /usr/local/bin/moosh

# PHP config
COPY moodle-php.ini /etc/php/7.4/apache2/conf.d/90-moodle.ini
COPY moodle-php.ini /etc/php/7.4/cli/conf.d/90-moodle.ini

# Moodle data dir
RUN mkdir -p /var/www/moodledata && \
    chown -R www-data:www-data /var/www/moodledata && \
    chmod -R 770 /var/www/moodledata

# Cron
COPY moodle-cron /etc/cron.d/moodle-cron
RUN chmod 0644 /etc/cron.d/moodle-cron && \
    crontab /etc/cron.d/moodle-cron

# Startup script
COPY start.sh /usr/local/bin/
RUN chmod +x /usr/local/bin/start.sh

WORKDIR /var/www/html

# Traefik picks the backend port from EXPOSE (php:7.4-apache declared it)
EXPOSE 80

ENTRYPOINT ["/usr/local/bin/start.sh"]