First commit - DAMP stack with Prestashop 8 packed - Wp not completed yet

2024-02-22 14:42:48 +01:00
parent a67618887e
commit d818ef7dc4
29 changed files with 3810 additions and 2 deletions
--- a/144
+++ b/144
@@ -0,0 +1,144 @@
+include .env
+
+DOCKERCOMPOSE := $(shell command -v docker-compose 2> /dev/null)
+USAGE := Usage: make ENV={prod|preprod|dev} {docker-build|docker-start|docker-stop|docker-restart}
+
+ifndef DOCKERCOMPOSE
+$(error docker-compose is not available)
+endif
+
+ifndef ENV
+$(info Environment variable is not set, using default (dev))
+$(info $(USAGE))
+# $(error Exiting)
+endif
+
+DC_OVERRIDE := $(shell test -e docker-compose.override.yml && echo "--file docker-compose.override.yml")
+DC_OVERRIDE_ENV := $(shell test -e docker-compose.$(ENV).yml && echo "--file docker-compose.$(ENV).yml")
+
+DC=ENV=$(ENV) PROJECT=$(PROJECT) $(DOCKERCOMPOSE) --project-name "$(PROJECT)_$(ENV)" --file docker-compose.yml $(DC_OVERRIDE) $(DC_OVERRIDE_ENV)
+
+CC=$(CMS)
+
+default:
+	@echo "projet: " ${PROJECT}
+	@echo "No command given"
+	@echo "Usage: make {docker-build|docker-start|docker-stop|docker-restart}"
+	@false
+
+docker-build:
+	$(shell conf/scripts/create-cert.sh)
+	$(DC) build
+	$(DC) up -d
+	@cp volume/app/www/html/info.php volume/www/html/index.php
+	@open https://${DOMAIN}
+
+docker-start:
+	$(DC) start
+
+docker-stop:
+	$(DC) stop
+
+docker-down:
+	$(DC) down
+
+docker-restart: docker-stop docker-start
+
+docker-rm: docker-stop
+	$(DC) rm
+
+init-ssl:
+	$(shell conf/scripts/create-cert.sh)
+
+db-backup:
+	@echo "Backing up database"
+	@mkdir -p backup/
+	@docker exec --tty --interactive $(PROJECT).mariadb.$(ENV)  mariadb-dump -uuser -ppassword database > backup/db_`date +%d-%m-%Y"_"%H_%M_%S`.sql
+
+db-restore:
+	@echo "Restoring file to database (backup/db.sql)"
+	@docker exec -i $(PROJECT).mariadb.$(ENV) mmariadb -uuser -ppassword < backup/db.sql
+
+config-db-root:
+	@echo "  --> Generating mariadb auth file"
+	@cat conf/env/mariadb.env \
+		| python3 -c "import sys; import string; v=sys.stdin.readline().split('MYSQL_ROOT_PASSWORD=')[1]; print(string.Template(open('conf/build/mariadb/my.cnf').read()).substitute({'PASSWORD':v}))" \
+		| docker exec -i $(PROJECT).mariadb.$(ENV) sh -c 'cat > /root/.my.cnf'
+
+get-cms:
+ifeq ($(CMS),prestashop)
+# turn the detached message off
+	@git config --global advice.detachedHead false
+	@echo "cms ok: " ${CMS}
+	rm -f -r volume/www/html/*
+	@curl -L https://github.com/PrestaShop/PrestaShop/releases/download/$(CMSVERSION)/prestashop_$(CMSVERSION).zip --output volume/www/html/prestashop.zip
+	@unzip -o volume/www/html/prestashop.zip -d volume/www/html
+	@unzip -o volume/www/html/prestashop.zip -d volume/www/html
+	rm volume/www/html/Install_PrestaShop.html
+	rm volume/www/html/prestashop.zip
+	@mv volume/www/html/admin volume/www/html/administrator
+	@mkdir -p backup/
+	@echo "Saving database"
+	@docker exec --tty --interactive $(PROJECT).mariadb.$(ENV)  mysqldump -uuser -ppassword --all-databases > backup/db_`date +%d-%m-%Y"_"%H_%M_%S`.sql
+	@echo "Creating database"
+	-@docker exec --tty --interactive $(PROJECT).mariadb.$(ENV) mysqladmin -uroot -ppassword -f create or replace database 'database'
+	@mkdir -p ../
+	@git clone https://github.com/Oksydan/falcon.git
+	@mv falcon volume/www/html/themes/falcon
+	@php volume/www/html/install/index_cli.php --domain=myshop.local  \
+	--db_server=127.0.0.1 \
+	--db_name=database \
+	--db_user=user \
+	--db_password=password \
+	--db_create=1 \
+	--name=${PROJECT} \
+	--email=${EMAIL} \
+	--password=${PASSWORD} \
+	--prefix=${PREFIX} \
+	--language=fr \
+	--ssl=1
+
+	@curl -L https://github.com/Oksydan/is_themecore/releases/download/v4.1.1/is_themecore.zip --output volume/www/html/modules/is_themecore.zip
+	@unzip -o volume/www/html/modules/is_themecore.zip -d volume/www/html/modules
+	@curl -L https://github.com/Oksydan/is_searchbar/releases/download/v3.0.1/is_searchbar.zip --output volume/www/html/modules/is_searchbar.zip
+	@unzip -o volume/www/html/modules/is_searchbar.zip -d volume/www/html/modules
+	@curl -L https://github.com/Oksydan/is_imageslider/releases/download/v2.3.2/is_imageslider.zip --output volume/www/html/modules/is_imageslider.zip
+	@unzip -o volume/www/html/modules/is_imageslider.zip -d volume/www/html/modules
+	@curl -L https://github.com/Oksydan/is_shoppingcart/releases/download/v3.0.1/is_shoppingcart.zip --output volume/www/html/modules/is_shoppingcart.zip
+	@unzip -o volume/www/html/modules/is_shoppingcart.zip -d volume/www/html/modules
+
+	@cp volume/app/prestashop/falconchild.zip volume/www/html/themes/
+	@unzip -o volume/www/html/themes/falconchild.zip -d volume/www/html/themes/
+	rm volume/www/html/themes/falconchild.zip
+
+	@mv volume/www/html/install volume/www/html/installator
+	@cp volume/app/www/html/info.php volume/www/html/info.php
+	@cp volume/app/prestashop/parameters.php volume/www/html/app/config/parameters.php
+	@cp volume/app/prestashop/defines.inc.php volume/www/html/config/defines.inc.php
+	@open https://${DOMAIN}/administrator
+else
+	@echo "Nothing to CMS"
+endif
+
+ifeq ($(CMS),wordpress)
+	@rm -f -r volume/www/*
+	@composer create-project roots/bedrock
+	@mv bedrock volume/www/html
+	@cp volume/app/bedrock/.env volume/www/html/.env
+	@cp volume/app/bedrock/picostrap5.zip volume/www/html/web/app/themes/picostrap5.zip
+	@unzip -o volume/www/html/web/app/themes/picostrap5.zip -d volume/www/html/web/app/themes
+	rm volume/www/html/web/app/themes/picostrap5.zip
+	@cp volume/app/bedrock/picostrap5-child.zip volume/www/html/web/app/themes/picostrap5-child.zip
+	@unzip -o volume/www/html/web/app/themes/picostrap5-child.zip -d volume/www/html/web/app/themes
+	rm volume/www/html/web/app/themes/picostrap5-child.zip
+	@cp volume/app/bedrock/plugins.zip volume/www/html/web/app/themes/plugins.zip
+	@unzip -o volume/www/html/web/app/themes/plugins.zip -d volume/www/html/web/app/plugins
+	rm volume/www/html/web/app/themes/plugins.zip
+else
+	@echo "Nothing to CMS"
+endif
+	
+get-all-plugins:
+	@git clone https://github.com/ldesmarets/myWpPlugin.git wp-plugins
+	@unzip -o "wp-plugins/*.zip" -d volume/bedrock/web/app/plugins/
+	rm -f -r wp-plugins
--- a/README.md
+++ b/README.md
@@ -1,3 +1,205 @@
-# damp-shop
+# Docker Containers ready for Development

-Solido DAMP V1.0: Docker dev stack for Prestashop / Wordpress
+## Authors
+
+#--------------------------------------------------------------------
+#Solido DAMP V1.0: Dev stack for Prestashop / Wordpress
+#Based on dev-docker-apache2.4-php8-mariadb10.1 #https://github.com/Pixelao/dev-docker-apache2.4-php8-mariadb10.1
+#LABEL MAINTAINER="Adrián Martín Ramos <contacto@adrianmr.com>"
+
+## Version History
+
+- **0.1**
+  \_ Initial Release
+  ##Contributors
+  _it@solido.com 2024
+  #--------------------------------------------------------------------
+
+### Dependencies and needs
+
+- [Install Docker](https://docs.docker.com/install/)
+- [Install Docker Compose](https://docs.docker.com/compose/install/)
+
+### Installing
+
+- First, clone or download the project on your local dev environement
+- Edit your local host file and add your local domain name ex : myshop.local
+- Find it on /tec/host linux, Mac os
+- Edit the .env at top of the container
+- ENV=dev
+- IP=127.0.0.1 -> localhost IP by default
+- PROJECT=myshop -> project name
+- DOMAIN=myshop.local -> your local domain name
+- CMS=prestashop -> choose your CMS installation
+- #CMS=wordpress -> or comment
+- PHPVERSION=8.1 -> select wich PHP
+- CMSVERSION=8.1.2 -> selet CMS version
+
+- Start the containers with command:
+  ```bash
+  dmake ENV=dev docker-build
+  ```
+
+### Help
+
+The docker-project is based on 3 containers
+
+- skeleton-docker.apache **(Apache 2.4, container image httpd:2.4-alpine)**
+- skeleton-docker.php **(PHP-{PHPVERSION}, container image php:{PHPVERSION}-fpm-alpine)**
+- skeleton-docker.mariadb **(MariaDb 10.1, container image mariadb:10.1)**
+
+You can check Apache and PHP logs on volume/logs\_\_
+
+### Versions and modules
+
+- [Apache-2.4](https://httpd.apache.org/docs/2.4/en/)
+- [MariaDB-10.1](https://downloads.mariadb.org/mariadb/10.1.41/)
+- [PHP-{PHPVERSION}-FPM](https://www.php.net/ChangeLog-{PHPVERSION}.php)
+
+  - [PHP Modules]
+
+    - bcmath
+    - Core
+    - ctype
+    - curl
+    - date
+    - dom
+    - exif
+    - fileinfo
+    - filter
+    - ftp
+    - gd
+    - hash
+    - iconv
+    - intl
+    - json
+    - libxml
+    - mbstring
+    - mysqli
+    - mysqlnd
+    - openssl
+    - pcre
+    - PDO
+    - pdo_mysql
+    - pdo_pgsql
+    - pdo_sqlite
+    - Phar
+    - posix
+    - rar
+    - readline
+    - redis
+    - Reflection
+    - session
+    - SimpleXML
+    - soap
+    - sodium
+    - SPL
+    - sqlite3
+    - standard
+    - tokenizer
+    - xdebug
+    - xml
+    - xmlreader
+    - xmlwriter
+    - xsl
+    - Zend OPcache
+    - zip
+    - zlib
+
+  - [Zend Modules]
+    - Xdebug
+    - Zend OPcache
+
+#--------------------------------------------------------------------
+
+# Make actions list
+
+#--------------------------------------------------------------------
+
+# Build the infrastructure
+
+```
+make ENV=dev docker-build (use docker-compose.dev.yml)
+```
+
+# Database tools
+
+## Configure backup & restore feature
+
+```
+make ENV=dev config-db-root
+```
+
+## You can import your database with :
+
+##It will restore the db using `backup/db.sql` file.
+##(You may need to manually empty the database if your file does not contain remove table commands)
+
+```
+make ENV=dev db-restore
+```
+
+## You can export your database with :
+
+```
+make ENV=dev db-backup
+```
+
+# Create or recreate your SSL keys
+
+```
+make ENV=dev init-ssl
+```
+
+# Manage Docker containers
+
+```
+make ENV=dev docker-restart
+```
+
+```
+ make ENV=dev docker-start
+```
+
+```
+make ENV=dev docker-stop
+```
+
+## Install Prestashop or Wordpress with Bedrock achitecture depending of the top .env file
+
+```
+make ENV=dev dget-cms
+```
+
+#--------------------------------------------------------------------
+
+# Prestashop
+
+#--------------------------------------------------------------------
+
+```
+Prestashop install with install-cli.php
+* ENV default parameters *
+  --db_server=127.0.0.1
+	--db_name=database
+	--db_user=user
+	--db_password=password
+*
+
+* You can acces Prestashop bo with your https://yourlocaldomainname/administrator
+* user and password defined in .env top file
+
+* We use the Oxydan falcon theme at https://github.com/Oksydan/falcon
+* and a child theme myshop-theme
+* Refer to the Oxydan Falcon theme read-me to start your theme development
+*
+* Edit /volume/www/html/themes/falconchild/dev/webpack/.env
+* Run npm install on _dev
+* Run npm run build
+* Run npm run dev  -> for hot replacement
+*
+* Help whith read-me file of chid theme
+*
+* Errors : if you get an error with Prestashop 8 and integrity check of database or ps_linklist not installing please use mak ENV=dev get-cms a second time
+*
+```
--- a/conf/.env/mariadb.env
+++ b/conf/.env/mariadb.env
@@ -0,0 +1,4 @@
+MYSQL_ROOT_PASSWORD=password
+MYSQL_DATABASE=database
+MYSQL_USER=user
+MYSQL_PASSWORD=password
--- a/conf/.env/php.env
+++ b/conf/.env/php.env
@@ -0,0 +1 @@
+WORKDIR=/var/www/html/
--- a/conf/.env/pma.env
+++ b/conf/.env/pma.env
@@ -0,0 +1 @@
+PMA_HOSTS=mariadb
--- a/conf/.env/prestashop.env
+++ b/conf/.env/prestashop.env
@@ -0,0 +1,25 @@
+DB_SERVER=mariadb
+DB_PORT=3306
+PS_INSTALL_DB=1
+DB_NAME=database
+DB_USER=root
+DB_PASSWD=password
+DB_PREFIX=ps_
+PS_ERASE_DB=0
+PS_INSTALL_DB=1
+PS_FOLDER_ADMIN=administrator
+PS_FOLDER_INSTALL=installator
+PS_DEV_MODE=1
+PS_DEMO_MODE=1
+PS_INSTALL_AUTO=1
+PS_ENABLE_SSL=0
+PS_HANDLE_DYNAMIC_DOMAIN=0
+ADMIN_MAIL=it@solido.com
+ADMIN_PASSWD=password
+PS_LANGUAGE=fr
+PS_COUNTRY=FR
+PS_FOLDER_ADMIN=administrator
+PS_DOMAIN=myshop.local
+PS_SHOP_DOMAIN =myshop.local
+PS_SHOP_DOMAIN_SSL =myshop.local
+PS_FOLDER_INSTALL=installator
--- a/conf/apache/Dockerfile
+++ b/conf/apache/Dockerfile
@@ -0,0 +1,25 @@
+FROM httpd:2.4-alpine
+
+ARG SERVER_NAMEZ
+ENV SERVER_NAME=${SERVER_NAMEZ}
+ENV TZ=Europe/Paris
+ENV APP_ROOT=/var/www/
+ENV DOCUMENT_ROOT=${APP_ROOT}/html/
+ENV APACHE_LOG_DIR=/usr/local/apache2/logs/
+ENV APACHE_RUN_USER=www-data
+ENV APACHE_RUN_GROUP=www-data
+
+RUN apk add --update --no-cache tzdata
+
+WORKDIR ${APP_ROOT}
+
+RUN mkdir -p ${APP_ROOT}
+RUN mkdir -p ${DOCUMENT_ROOT}
+
+RUN chown -R ${APACHE_RUN_USER}:${APACHE_RUN_GROUP} ${APP_ROOT}
+RUN chown -R ${APACHE_RUN_USER}:${APACHE_RUN_GROUP} ${DOCUMENT_ROOT}
+
+RUN ln -s ${APP_ROOT}/public_html/index.php ${DOCUMENT_ROOT}
+
+COPY ./httpd.conf /usr/local/apache2/conf/httpd.conf
+COPY ./httpd-ssl.conf /usr/local/apache2/conf/extra/httpd-ssl.conf
--- a/conf/apache/httpd-ssl.conf
+++ b/conf/apache/httpd-ssl.conf
@@ -0,0 +1,298 @@
+#
+# This is the Apache server configuration file providing SSL support.
+# It contains the configuration directives to instruct the server how to
+# serve pages over an https connection. For detailed information about these 
+# directives see <URL:http://httpd.apache.org/docs/2.4/mod/mod_ssl.html>
+# 
+# Do NOT simply read the instructions in here without understanding
+# what they do.  They're here only as hints or reminders.  If you are unsure
+# consult the online docs. You have been warned.  
+#
+# Required modules: mod_log_config, mod_setenvif, mod_ssl,
+#          socache_shmcb_module (for default value of SSLSessionCache)
+
+#
+# Pseudo Random Number Generator (PRNG):
+# Configure one or more sources to seed the PRNG of the SSL library.
+# The seed data should be of good random quality.
+# WARNING! On some platforms /dev/random blocks if not enough entropy
+# is available. This means you then cannot use the /dev/random device
+# because it would lead to very long connection times (as long as
+# it requires to make more entropy available). But usually those
+# platforms additionally provide a /dev/urandom device which doesn't
+# block. So, if available, use this one instead. Read the mod_ssl User
+# Manual for more details.
+#
+#SSLRandomSeed startup file:/dev/random  512
+#SSLRandomSeed startup file:/dev/urandom 512
+#SSLRandomSeed connect file:/dev/random  512
+#SSLRandomSeed connect file:/dev/urandom 512
+
+
+#
+# When we also provide SSL we have to listen to the 
+# standard HTTP port (see above) and to the HTTPS port
+##
+Listen 443 https
+
+##
+##  SSL Global Context
+##
+##  All SSL configuration in this context applies both to
+##  the main server and all SSL-enabled virtual hosts.
+##
+
+#   SSL Cipher Suite:
+#   List the ciphers that the client is permitted to negotiate,
+#   and that httpd will negotiate as the client of a proxied server.
+#   See the OpenSSL documentation for a complete list of ciphers, and
+#   ensure these follow appropriate best practices for this deployment.
+#   httpd 2.2.30, 2.4.13 and later force-disable aNULL, eNULL and EXP ciphers,
+#   while OpenSSL disabled these by default in 0.9.8zf/1.0.0r/1.0.1m/1.0.2a.
+#SSLCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES
+#SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
+#SSLProxyCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES
+SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
+
+SSLUseStapling on
+SSLStaplingCache "shmcb:logs/stapling-cache(150000)"
+
+#  By the end of 2016, only TLSv1.2 ciphers should remain in use.
+#  Older ciphers should be disallowed as soon as possible, while the
+#  kRSA ciphers do not offer forward secrecy.  These changes inhibit
+#  older clients (such as IE6 SP2 or IE8 on Windows XP, or other legacy
+#  non-browser tooling) from successfully connecting.  
+#
+#  To restrict mod_ssl to use only TLSv1.2 ciphers, and disable
+#  those protocols which do not support forward secrecy, replace
+#  the SSLCipherSuite and SSLProxyCipherSuite directives above with
+#  the following two directives, as soon as practical.
+# SSLCipherSuite HIGH:MEDIUM:!SSLv3:!kRSA
+# SSLProxyCipherSuite HIGH:MEDIUM:!SSLv3:!kRSA
+
+#   User agents such as web browsers are not configured for the user's
+#   own preference of either security or performance, therefore this
+#   must be the prerogative of the web server administrator who manages
+#   cpu load versus confidentiality, so enforce the server's cipher order.
+SSLHonorCipherOrder on 
+
+#   SSL Protocol support:
+#   List the protocol versions which clients are allowed to connect with.
+#   Disable SSLv3 by default (cf. RFC 7525 3.1.1).  TLSv1 (1.0) should be
+#   disabled as quickly as practical.  By the end of 2016, only the TLSv1.2
+#   protocol or later should remain in use.
+#SSLProtocol all -SSLv3
+#SSLProxyProtocol all -SSLv3
+SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+#   Pass Phrase Dialog:
+#   Configure the pass phrase gathering process.
+#   The filtering dialog program (`builtin' is an internal
+#   terminal dialog) has to provide the pass phrase on stdout.
+SSLPassPhraseDialog  builtin
+
+#   Inter-Process Session Cache:
+#   Configure the SSL Session Cache: First the mechanism 
+#   to use and second the expiring timeout (in seconds).
+#SSLSessionCache         "dbm:/usr/local/apache2/logs/ssl_scache"
+SSLSessionCache        "shmcb:/usr/local/apache2/logs/ssl_scache(512000)"
+SSLSessionCacheTimeout  300
+
+#   OCSP Stapling (requires OpenSSL 0.9.8h or later)
+#
+#   This feature is disabled by default and requires at least
+#   the two directives SSLUseStapling and SSLStaplingCache.
+#   Refer to the documentation on OCSP Stapling in the SSL/TLS
+#   How-To for more information.
+#
+#   Enable stapling for all SSL-enabled servers:
+#SSLUseStapling On
+
+#   Define a relatively small cache for OCSP Stapling using
+#   the same mechanism that is used for the SSL session cache
+#   above.  If stapling is used with more than a few certificates,
+#   the size may need to be increased.  (AH01929 will be logged.)
+#SSLStaplingCache "shmcb:/usr/local/apache2/logs/ssl_stapling(32768)"
+
+#   Seconds before valid OCSP responses are expired from the cache
+#SSLStaplingStandardCacheTimeout 3600
+
+#   Seconds before invalid OCSP responses are expired from the cache
+#SSLStaplingErrorCacheTimeout 600
+
+##
+## SSL Virtual Host Context
+##
+
+<VirtualHost _default_:443>
+
+ proxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://php:9000${DOCUMENT_ROOT}/
+#   General setup for the virtual host
+DocumentRoot ${DOCUMENT_ROOT}
+ServerName {SERVER_NAME}:443
+ServerAdmin admin@${SERVER_NAME}
+ErrorLog /proc/self/fd/2
+TransferLog /proc/self/fd/1
+Header set Access-Control-Allow-Origin "*"
+
+#   SSL Engine Switch:
+#   Enable/Disable SSL for this virtual host.
+SSLEngine on
+
+#   Server Certificate:
+#   Point SSLCertificateFile at a PEM encoded certificate.  If
+#   the certificate is encrypted, then you will be prompted for a
+#   pass phrase.  Note that a kill -HUP will prompt again.  Keep
+#   in mind that if you have both an RSA and a DSA certificate you
+#   can configure both in parallel (to also allow the use of DSA
+#   ciphers, etc.)
+#   Some ECC cipher suites (http://www.ietf.org/rfc/rfc4492.txt)
+#   require an ECC certificate which can also be configured in
+#   parallel.
+SSLCertificateFile "/etc/certs/${SERVER_NAME}.pem"
+#SSLCertificateFile "/usr/local/apache2/conf/server-dsa.crt"
+#SSLCertificateFile "/usr/local/apache2/conf/server-ecc.crt"
+
+#   Server Private Key:
+#   If the key is not combined with the certificate, use this
+#   directive to point at the key file.  Keep in mind that if
+#   you've both a RSA and a DSA private key you can configure
+#   both in parallel (to also allow the use of DSA ciphers, etc.)
+#   ECC keys, when in use, can also be configured in parallel
+SSLCertificateKeyFile "/etc/certs/${SERVER_NAME}-key.pem"
+#SSLCertificateKeyFile "/usr/local/apache2/conf/server-dsa.key"
+#SSLCertificateKeyFile "/usr/local/apache2/conf/server-ecc.key"
+
+#   Server Certificate Chain:
+#   Point SSLCertificateChainFile at a file containing the
+#   concatenation of PEM encoded CA certificates which form the
+#   certificate chain for the server certificate. Alternatively
+#   the referenced file can be the same as SSLCertificateFile
+#   when the CA certificates are directly appended to the server
+#   certificate for convenience.
+#SSLCertificateChainFile "/etc/certs/cacert.pem"
+
+#   Certificate Authority (CA):
+#   Set the CA certificate verification path where to find CA
+#   certificates for client authentication or alternatively one
+#   huge file containing all of them (file must be PEM encoded)
+#   Note: Inside SSLCACertificatePath you need hash symlinks
+#         to point to the certificate files. Use the provided
+#         Makefile to update the hash symlinks after changes.
+#SSLCACertificatePath "/usr/local/apache2/conf/ssl.crt"
+#SSLCACertificateFile "/usr/local/apache2/conf/ssl.crt/ca-bundle.crt"
+
+#   Certificate Revocation Lists (CRL):
+#   Set the CA revocation path where to find CA CRLs for client
+#   authentication or alternatively one huge file containing all
+#   of them (file must be PEM encoded).
+#   The CRL checking mode needs to be configured explicitly
+#   through SSLCARevocationCheck (defaults to "none" otherwise).
+#   Note: Inside SSLCARevocationPath you need hash symlinks
+#         to point to the certificate files. Use the provided
+#         Makefile to update the hash symlinks after changes.
+#SSLCARevocationPath "/usr/local/apache2/conf/ssl.crl"
+#SSLCARevocationFile "/usr/local/apache2/conf/ssl.crl/ca-bundle.crl"
+#SSLCARevocationCheck chain
+
+#   Client Authentication (Type):
+#   Client certificate verification type and depth.  Types are
+#   none, optional, require and optional_no_ca.  Depth is a
+#   number which specifies how deeply to verify the certificate
+#   issuer chain before deciding the certificate is not valid.
+#SSLVerifyClient require
+#SSLVerifyDepth  10
+
+#   TLS-SRP mutual authentication:
+#   Enable TLS-SRP and set the path to the OpenSSL SRP verifier
+#   file (containing login information for SRP user accounts). 
+#   Requires OpenSSL 1.0.1 or newer. See the mod_ssl FAQ for
+#   detailed instructions on creating this file. Example:
+#   "openssl srp -srpvfile /usr/local/apache2/conf/passwd.srpv -add username"
+#SSLSRPVerifierFile "/usr/local/apache2/conf/passwd.srpv"
+
+#   Access Control:
+#   With SSLRequire you can do per-directory access control based
+#   on arbitrary complex boolean expressions containing server
+#   variable checks and other lookup directives.  The syntax is a
+#   mixture between C and Perl.  See the mod_ssl documentation
+#   for more details.
+#<Location />
+#SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
+#            and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
+#            and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \
+#            and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
+#            and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20       ) \
+#           or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
+#</Location>
+
+#   SSL Engine Options:
+#   Set various options for the SSL engine.
+#   o FakeBasicAuth:
+#     Translate the client X.509 into a Basic Authorisation.  This means that
+#     the standard Auth/DBMAuth methods can be used for access control.  The
+#     user name is the `one line' version of the client's X.509 certificate.
+#     Note that no password is obtained from the user. Every entry in the user
+#     file needs this password: `xxj31ZMTZzkVA'.
+#   o ExportCertData:
+#     This exports two additional environment variables: SSL_CLIENT_CERT and
+#     SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
+#     server (always existing) and the client (only existing when client
+#     authentication is used). This can be used to import the certificates
+#     into CGI scripts.
+#   o StdEnvVars:
+#     This exports the standard SSL/TLS related `SSL_*' environment variables.
+#     Per default this exportation is switched off for performance reasons,
+#     because the extraction step is an expensive operation and is usually
+#     useless for serving static content. So one usually enables the
+#     exportation for CGI and SSI requests only.
+#   o StrictRequire:
+#     This denies access when "SSLRequireSSL" or "SSLRequire" applied even
+#     under a "Satisfy any" situation, i.e. when it applies access is denied
+#     and no other module can change it.
+#   o OptRenegotiate:
+#     This enables optimized SSL connection renegotiation handling when SSL
+#     directives are used in per-directory context. 
+#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
+<FilesMatch "\.(cgi|shtml|phtml|php)$">
+    SSLOptions +StdEnvVars
+</FilesMatch>
+<Directory "/usr/local/apache2/cgi-bin">
+    SSLOptions +StdEnvVars
+</Directory>
+
+#   SSL Protocol Adjustments:
+#   The safe and default but still SSL/TLS standard compliant shutdown
+#   approach is that mod_ssl sends the close notify alert but doesn't wait for
+#   the close notify alert from client. When you need a different shutdown
+#   approach you can use one of the following variables:
+#   o ssl-unclean-shutdown:
+#     This forces an unclean shutdown when the connection is closed, i.e. no
+#     SSL close notify alert is sent or allowed to be received.  This violates
+#     the SSL/TLS standard but is needed for some brain-dead browsers. Use
+#     this when you receive I/O errors because of the standard approach where
+#     mod_ssl sends the close notify alert.
+#   o ssl-accurate-shutdown:
+#     This forces an accurate shutdown when the connection is closed, i.e. a
+#     SSL close notify alert is send and mod_ssl waits for the close notify
+#     alert of the client. This is 100% SSL/TLS standard compliant, but in
+#     practice often causes hanging connections with brain-dead browsers. Use
+#     this only for browsers where you know that their SSL implementation
+#     works correctly. 
+#   Notice: Most problems of broken clients are also related to the HTTP
+#   keep-alive facility, so you usually additionally want to disable
+#   keep-alive for those clients, too. Use variable "nokeepalive" for this.
+#   Similarly, one has to force some clients to use HTTP/1.0 to workaround
+#   their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
+#   "force-response-1.0" for this.
+BrowserMatch "MSIE [2-5]" \
+         nokeepalive ssl-unclean-shutdown \
+         downgrade-1.0 force-response-1.0
+
+#   Per-Server Logging:
+#   The home of a custom SSL log file. Use this when you want a
+#   compact non-error SSL logfile on a virtual host basis.
+CustomLog /proc/self/fd/1 \
+          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
+
+</VirtualHost>                                  
--- a/conf/apache/httpd-vhosts.conf
+++ b/conf/apache/httpd-vhosts.conf
@@ -0,0 +1,30 @@
+<VirtualHost  *:443>
+    proxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://php:9000${DOCUMENT_ROOT}/
+    SSLEngine on
+    SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
+
+    SSLCertificateFile /etc/certs/${SERVER_NAME}.pem
+    SSLCertificateKeyFile /etc/certs/${SERVER_NAME}-key.pem
+    SSLCertificateChainFile /etc/certs/cacert.pem
+
+    ServerName      ${SERVER_NAME}/
+    DocumentRoot    ${DOCUMENT_ROOT}
+
+    Header set Access-Control-Allow-Origin "*"
+    
+    ErrorLog ${APACHE_LOG_DIR}/error.log
+    CustomLog ${APACHE_LOG_DIR}/access.log combined
+
+    <Directory /var/www/html>
+            AllowOverride none
+            Require all granted
+            Order Allow,Deny
+            Allow from all
+            DirectoryIndex index.php
+    </Directory>
+</VirtualHost>
+
+<VirtualHost *:80>
+    ServerName	${SERVER_NAME}
+    Redirect / https://${SERVER_NAME}
+</VirtualHost>
--- a/conf/apache/httpd.conf
+++ b/conf/apache/httpd.conf
@@ -0,0 +1,554 @@
+#
+# This is the main Apache HTTP server configuration file.  It contains the
+# configuration directives that give the server its instructions.
+# See <URL:http://httpd.apache.org/docs/2.4/> for detailed information.
+# In particular, see
+# <URL:http://httpd.apache.org/docs/2.4/mod/directives.html>
+# for a discussion of each configuration directive.
+#
+# Do NOT simply read the instructions in here without understanding
+# what they do.  They're here only as hints or reminders.  If you are unsure
+# consult the online docs. You have been warned.
+#
+# Configuration and logfile names: If the filenames you specify for many
+# of the server's control files begin with "/" (or "drive:/" for Win32), the
+# server will use that explicit path.  If the filenames do *not* begin
+# with "/", the value of ServerRoot is prepended -- so "logs/access_log"
+# with ServerRoot set to "/usr/local/apache2" will be interpreted by the
+# server as "/usr/local/apache2/logs/access_log", whereas "/logs/access_log"
+# will be interpreted as '/logs/access_log'.
+
+#
+# ServerRoot: The top of the directory tree under which the server's
+# configuration, error, and log files are kept.
+#
+# Do not add a slash at the end of the directory path.  If you point
+# ServerRoot at a non-local disk, be sure to specify a local disk on the
+# Mutex directive, if file-based mutexes are used.  If you wish to share the
+# same ServerRoot for multiple httpd daemons, you will need to change at
+# least PidFile.
+#
+ServerRoot "/usr/local/apache2"
+
+#
+# Mutex: Allows you to set the mutex mechanism and mutex file directory
+# for individual mutexes, or change the global defaults
+#
+# Uncomment and change the directory if mutexes are file-based and the default
+# mutex file directory is not on a local disk or is not appropriate for some
+# other reason.
+#
+# Mutex default:logs
+
+#
+# Listen: Allows you to bind Apache to specific IP addresses and/or
+# ports, instead of the default. See also the <VirtualHost>
+# directive.
+#
+# Change this to Listen on specific IP addresses as shown below to
+# prevent Apache from glomming onto all bound IP addresses.
+#
+#Listen 12.34.56.78:80
+Listen 80
+
+#
+# Dynamic Shared Object (DSO) Support
+#
+# To be able to use the functionality of a module which was built as a DSO you
+# have to place corresponding `LoadModule' lines at this location so the
+# directives contained in it are actually available _before_ they are used.
+# Statically compiled modules (those listed by `httpd -l') do not need
+# to be loaded here.
+#
+# Example:
+# LoadModule foo_module modules/mod_foo.so
+#
+LoadModule mpm_event_module modules/mod_mpm_event.so
+#LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
+#LoadModule mpm_worker_module modules/mod_mpm_worker.so
+LoadModule authn_file_module modules/mod_authn_file.so
+#LoadModule authn_dbm_module modules/mod_authn_dbm.so
+#LoadModule authn_anon_module modules/mod_authn_anon.so
+#LoadModule authn_dbd_module modules/mod_authn_dbd.so
+LoadModule authn_socache_module modules/mod_authn_socache.so
+LoadModule authn_core_module modules/mod_authn_core.so
+LoadModule authz_host_module modules/mod_authz_host.so
+LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
+LoadModule authz_user_module modules/mod_authz_user.so
+#LoadModule authz_dbm_module modules/mod_authz_dbm.so
+#LoadModule authz_owner_module modules/mod_authz_owner.so
+#LoadModule authz_dbd_module modules/mod_authz_dbd.so
+LoadModule authz_core_module modules/mod_authz_core.so
+#LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
+#LoadModule authnz_fcgi_module modules/mod_authnz_fcgi.so
+LoadModule access_compat_module modules/mod_access_compat.so
+LoadModule auth_basic_module modules/mod_auth_basic.so
+#LoadModule auth_form_module modules/mod_auth_form.so
+#LoadModule auth_digest_module modules/mod_auth_digest.so
+#LoadModule allowmethods_module modules/mod_allowmethods.so
+#LoadModule isapi_module modules/mod_isapi.so
+#LoadModule file_cache_module modules/mod_file_cache.so
+#LoadModule cache_module modules/mod_cache.so
+#LoadModule cache_disk_module modules/mod_cache_disk.so
+#LoadModule cache_socache_module modules/mod_cache_socache.so
+LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
+#LoadModule socache_dbm_module modules/mod_socache_dbm.so
+#LoadModule socache_memcache_module modules/mod_socache_memcache.so
+#LoadModule socache_redis_module modules/mod_socache_redis.so
+#LoadModule watchdog_module modules/mod_watchdog.so
+#LoadModule macro_module modules/mod_macro.so
+#LoadModule dbd_module modules/mod_dbd.so
+#LoadModule bucketeer_module modules/mod_bucketeer.so
+#LoadModule dumpio_module modules/mod_dumpio.so
+#LoadModule echo_module modules/mod_echo.so
+#LoadModule example_hooks_module modules/mod_example_hooks.so
+#LoadModule case_filter_module modules/mod_case_filter.so
+#LoadModule case_filter_in_module modules/mod_case_filter_in.so
+#LoadModule example_ipc_module modules/mod_example_ipc.so
+#LoadModule buffer_module modules/mod_buffer.so
+#LoadModule data_module modules/mod_data.so
+#LoadModule ratelimit_module modules/mod_ratelimit.so
+LoadModule reqtimeout_module modules/mod_reqtimeout.so
+#LoadModule ext_filter_module modules/mod_ext_filter.so
+#LoadModule request_module modules/mod_request.so
+#LoadModule include_module modules/mod_include.so
+LoadModule filter_module modules/mod_filter.so
+#LoadModule reflector_module modules/mod_reflector.so
+#LoadModule substitute_module modules/mod_substitute.so
+#LoadModule sed_module modules/mod_sed.so
+#LoadModule charset_lite_module modules/mod_charset_lite.so
+#LoadModule deflate_module modules/mod_deflate.so
+#LoadModule xml2enc_module modules/mod_xml2enc.so
+#LoadModule proxy_html_module modules/mod_proxy_html.so
+#LoadModule brotli_module modules/mod_brotli.so
+LoadModule mime_module modules/mod_mime.so
+#LoadModule ldap_module modules/mod_ldap.so
+LoadModule log_config_module modules/mod_log_config.so
+LoadModule log_debug_module modules/mod_log_debug.so
+#LoadModule log_forensic_module modules/mod_log_forensic.so
+#LoadModule logio_module modules/mod_logio.so
+#LoadModule lua_module modules/mod_lua.so
+LoadModule env_module modules/mod_env.so
+#LoadModule mime_magic_module modules/mod_mime_magic.so
+#LoadModule cern_meta_module modules/mod_cern_meta.so
+#LoadModule expires_module modules/mod_expires.so
+LoadModule headers_module modules/mod_headers.so
+#LoadModule ident_module modules/mod_ident.so
+#LoadModule usertrack_module modules/mod_usertrack.so
+#LoadModule unique_id_module modules/mod_unique_id.so
+LoadModule setenvif_module modules/mod_setenvif.so
+LoadModule version_module modules/mod_version.so
+#LoadModule remoteip_module modules/mod_remoteip.so
+LoadModule proxy_module modules/mod_proxy.so
+#LoadModule proxy_connect_module modules/mod_proxy_connect.so
+#LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
+#LoadModule proxy_http_module modules/mod_proxy_http.so
+LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so
+#LoadModule proxy_scgi_module modules/mod_proxy_scgi.so
+#LoadModule proxy_uwsgi_module modules/mod_proxy_uwsgi.so
+#LoadModule proxy_fdpass_module modules/mod_proxy_fdpass.so
+#LoadModule proxy_wstunnel_module modules/mod_proxy_wstunnel.so
+#LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
+#LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
+#LoadModule proxy_express_module modules/mod_proxy_express.so
+#LoadModule proxy_hcheck_module modules/mod_proxy_hcheck.so
+#LoadModule session_module modules/mod_session.so
+#LoadModule session_cookie_module modules/mod_session_cookie.so
+#LoadModule session_crypto_module modules/mod_session_crypto.so
+#LoadModule session_dbd_module modules/mod_session_dbd.so
+#LoadModule slotmem_shm_module modules/mod_slotmem_shm.so
+#LoadModule slotmem_plain_module modules/mod_slotmem_plain.so
+LoadModule ssl_module modules/mod_ssl.so
+#LoadModule optional_hook_export_module modules/mod_optional_hook_export.so
+#LoadModule optional_hook_import_module modules/mod_optional_hook_import.so
+#LoadModule optional_fn_import_module modules/mod_optional_fn_import.so
+#LoadModule optional_fn_export_module modules/mod_optional_fn_export.so
+#LoadModule dialup_module modules/mod_dialup.so
+#LoadModule http2_module modules/mod_http2.so
+#LoadModule proxy_http2_module modules/mod_proxy_http2.so
+#LoadModule md_module modules/mod_md.so
+#LoadModule lbmethod_byrequests_module modules/mod_lbmethod_byrequests.so
+#LoadModule lbmethod_bytraffic_module modules/mod_lbmethod_bytraffic.so
+#LoadModule lbmethod_bybusyness_module modules/mod_lbmethod_bybusyness.so
+#LoadModule lbmethod_heartbeat_module modules/mod_lbmethod_heartbeat.so
+LoadModule unixd_module modules/mod_unixd.so
+#LoadModule heartbeat_module modules/mod_heartbeat.so
+#LoadModule heartmonitor_module modules/mod_heartmonitor.so
+#LoadModule dav_module modules/mod_dav.so
+LoadModule status_module modules/mod_status.so
+LoadModule autoindex_module modules/mod_autoindex.so
+#LoadModule asis_module modules/mod_asis.so
+#LoadModule info_module modules/mod_info.so
+#LoadModule suexec_module modules/mod_suexec.so
+<IfModule !mpm_prefork_module>
+        #LoadModule cgid_module modules/mod_cgid.so
+</IfModule>
+<IfModule mpm_prefork_module>
+        #LoadModule cgi_module modules/mod_cgi.so
+</IfModule>
+#LoadModule dav_fs_module modules/mod_dav_fs.so
+#LoadModule dav_lock_module modules/mod_dav_lock.so
+#LoadModule vhost_alias_module modules/mod_vhost_alias.so
+#LoadModule negotiation_module modules/mod_negotiation.so
+LoadModule dir_module modules/mod_dir.so
+#LoadModule imagemap_module modules/mod_imagemap.so
+#LoadModule actions_module modules/mod_actions.so
+#LoadModule speling_module modules/mod_speling.so
+#LoadModule userdir_module modules/mod_userdir.so
+LoadModule alias_module modules/mod_alias.so
+LoadModule rewrite_module modules/mod_rewrite.so
+
+<IfModule unixd_module>
+#
+# If you wish httpd to run as a different user or group, you must run
+# httpd as root initially and it will switch.
+#
+# User/Group: The name (or #number) of the user/group to run httpd as.
+# It is usually good practice to create a dedicated user and group for
+# running httpd, as with most system services.
+#
+User ${APACHE_RUN_USER}
+Group ${APACHE_RUN_GROUP}
+
+</IfModule>
+
+# 'Main' server configuration
+#
+# The directives in this section set up the values used by the 'main'
+# server, which responds to any requests that aren't handled by a
+# <VirtualHost> definition.  These values also provide defaults for
+# any <VirtualHost> containers you may define later in the file.
+#
+# All of these directives may appear inside <VirtualHost> containers,
+# in which case these default settings will be overridden for the
+# virtual host being defined.
+#
+
+#
+# ServerAdmin: Your address, where problems with the server should be
+# e-mailed.  This address appears on some server-generated pages, such
+# as error documents.  e.g. admin@your-domain.com
+#
+ServerAdmin admin@${SERVER_NAME}
+
+#
+# ServerName gives the name and port that the server uses to identify itself.
+# This can often be determined automatically, but we recommend you specify
+# it explicitly to prevent problems during startup.
+#
+# If your host doesn't have a registered DNS name, enter its IP address here.
+#
+ServerName ${SERVER_NAME}
+
+#
+# Deny access to the entirety of your server's filesystem. You must
+# explicitly permit access to web content directories in other
+# <Directory> blocks below.
+#
+<Directory />
+    AllowOverride none
+    Require all denied
+</Directory>
+
+#
+# Note that from this point forward you must specifically allow
+# particular features to be enabled - so if something's not working as
+# you might expect, make sure that you have specifically enabled it
+# below.
+#
+
+#
+# DocumentRoot: The directory out of which you will serve your
+# documents. By default, all requests are taken from this directory, but
+# symbolic links and aliases may be used to point to other locations.
+#
+
+ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://php:9000${DOCUMENT_ROOT}/$1
+DocumentRoot ${DOCUMENT_ROOT}
+
+<Directory ${DOCUMENT_ROOT}>
+    #
+    # Possible values for the Options directive are "None", "All",
+    # or any combination of:
+    #   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
+    #
+    # Note that "MultiViews" must be named *explicitly* --- "Options All"
+    # doesn't give it to you.
+    #
+    # The Options directive is both complicated and important.  Please see
+    # http://httpd.apache.org/docs/2.4/mod/core.html#options
+    # for more information.
+    #
+    Options Indexes FollowSymLinks
+    Header set Access-Control-Allow-Origin "*"
+    #
+    # AllowOverride controls what directives may be placed in .htaccess files.
+    # It can be "All", "None", or any combination of the keywords:
+    #   AllowOverride FileInfo AuthConfig Limit
+    #
+    AllowOverride All
+
+    #
+    # Controls who can get stuff from this server.
+    #
+    Require all granted
+    DirectoryIndex index.php
+</Directory>
+
+#
+# DirectoryIndex: sets the file that Apache will serve if a directory
+# is requested.
+#
+<IfModule dir_module>
+    DirectoryIndex index.html
+</IfModule>
+
+#
+# The following lines prevent .htaccess and .htpasswd files from being
+# viewed by Web clients.
+#
+<Files ".ht*">
+    Require all denied
+</Files>
+
+#
+# ErrorLog: The location of the error log file.
+# If you do not specify an ErrorLog directive within a <VirtualHost>
+# container, error messages relating to that virtual host will be
+# logged here.  If you *do* define an error logfile for a <VirtualHost>
+# container, that host's errors will be logged there and not here.
+#
+ErrorLog ${APACHE_LOG_DIR}/error.log
+
+#
+# LogLevel: Control the number of messages logged to the error_log.
+# Possible values include: debug, info, notice, warn, error, crit,
+# alert, emerg.
+#
+LogLevel warn
+
+<IfModule log_config_module>
+    #
+    # The following directives define some format nicknames for use with
+    # a CustomLog directive (see below).
+    #
+    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
+    LogFormat "%h %l %u %t \"%r\" %>s %b" common
+
+    <IfModule logio_module>
+      # You need to enable mod_logio.c to use %I and %O
+      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
+    </IfModule>
+
+    #
+    # The location and format of the access logfile (Common Logfile Format).
+    # If you do not define any access logfiles within a <VirtualHost>
+    # container, they will be logged here.  Contrariwise, if you *do*
+    # define per-<VirtualHost> access logfiles, transactions will be
+    # logged therein and *not* in this file.
+    #
+    CustomLog ${APACHE_LOG_DIR}/access.log combined
+
+    #
+    # If you prefer a logfile with access, agent, and referer information
+    # (Combined Logfile Format) you can use the following directive.
+    #
+    #CustomLog "logs/access_log" combined
+</IfModule>
+
+<IfModule alias_module>
+    #
+    # Redirect: Allows you to tell clients about documents that used to
+    # exist in your server's namespace, but do not anymore. The client
+    # will make a new request for the document at its new location.
+    # Example:
+    # Redirect permanent /foo http://www.example.com/bar
+
+    #
+    # Alias: Maps web paths into filesystem paths and is used to
+    # access content that does not live under the DocumentRoot.
+    # Example:
+    # Alias /webpath /full/filesystem/path
+    #
+    # If you include a trailing / on /webpath then the server will
+    # require it to be present in the URL.  You will also likely
+    # need to provide a <Directory> section to allow access to
+    # the filesystem path.
+
+    #
+    # ScriptAlias: This controls which directories contain server scripts.
+    # ScriptAliases are essentially the same as Aliases, except that
+    # documents in the target directory are treated as applications and
+    # run by the server when requested rather than as documents sent to the
+    # client.  The same rules about trailing "/" apply to ScriptAlias
+    # directives as to Alias.
+    #
+    ScriptAlias /cgi-bin/ "/usr/local/apache2/cgi-bin/"
+
+</IfModule>
+
+<IfModule cgid_module>
+    #
+    # ScriptSock: On threaded servers, designate the path to the UNIX
+    # socket used to communicate with the CGI daemon of mod_cgid.
+    #
+    #Scriptsock cgisock
+</IfModule>
+
+#
+# "/usr/local/apache2/cgi-bin" should be changed to whatever your ScriptAliased
+# CGI directory exists, if you have that configured.
+#
+<Directory "/usr/local/apache2/cgi-bin">
+    AllowOverride None
+    Options None
+    Require all granted
+</Directory>
+
+<IfModule headers_module>
+    #
+    # Avoid passing HTTP_PROXY environment to CGI's on this or any proxied
+    # backend servers which have lingering "httpoxy" defects.
+    # 'Proxy' request header is undefined by the IETF, not listed by IANA
+    #
+    RequestHeader unset Proxy early
+</IfModule>
+
+<IfModule mime_module>
+    #
+    # TypesConfig points to the file containing the list of mappings from
+    # filename extension to MIME-type.
+    #
+    TypesConfig conf/mime.types
+
+    #
+    # AddType allows you to add to or override the MIME configuration
+    # file specified in TypesConfig for specific file types.
+    #
+    #AddType application/x-gzip .tgz
+    #
+    # AddEncoding allows you to have certain browsers uncompress
+    # information on the fly. Note: Not all browsers support this.
+    #
+    #AddEncoding x-compress .Z
+    #AddEncoding x-gzip .gz .tgz
+    #
+    # If the AddEncoding directives above are commented-out, then you
+    # probably should define those extensions to indicate media types:
+    #
+    AddType application/x-compress .Z
+    AddType application/x-gzip .gz .tgz
+
+    #
+    # AddHandler allows you to map certain file extensions to "handlers":
+    # actions unrelated to filetype. These can be either built into the server
+    # or added with the Action directive (see below)
+    #
+    # To use CGI scripts outside of ScriptAliased directories:
+    # (You will also need to add "ExecCGI" to the "Options" directive.)
+    #
+    #AddHandler cgi-script .cgi
+
+    # For type maps (negotiated resources):
+    #AddHandler type-map var
+
+    #
+    # Filters allow you to process content before it is sent to the client.
+    #
+    # To parse .shtml files for server-side includes (SSI):
+    # (You will also need to add "Includes" to the "Options" directive.)
+    #
+    #AddType text/html .shtml
+    #AddOutputFilter INCLUDES .shtml
+</IfModule>
+
+#
+# The mod_mime_magic module allows the server to use various hints from the
+# contents of the file itself to determine its type.  The MIMEMagicFile
+# directive tells the module where the hint definitions are located.
+#
+#MIMEMagicFile conf/magic
+
+#
+# Customizable error responses come in three flavors:
+# 1) plain text 2) local redirects 3) external redirects
+#
+# Some examples:
+#ErrorDocument 500 "The server made a boo boo."
+#ErrorDocument 404 /missing.html
+#ErrorDocument 404 "/cgi-bin/missing_handler.pl"
+#ErrorDocument 402 http://www.example.com/subscription_info.html
+#
+
+#
+# MaxRanges: Maximum number of Ranges in a request before
+# returning the entire resource, or one of the special
+# values 'default', 'none' or 'unlimited'.
+# Default setting is to accept 200 Ranges.
+#MaxRanges unlimited
+
+#
+# EnableMMAP and EnableSendfile: On systems that support it,
+# memory-mapping or the sendfile syscall may be used to deliver
+# files.  This usually improves server performance, but must
+# be turned off when serving from networked-mounted
+# filesystems or if support for these functions is otherwise
+# broken on your system.
+# Defaults: EnableMMAP On, EnableSendfile Off
+#
+#EnableMMAP off
+#EnableSendfile on
+
+# Supplemental configuration
+#
+# The configuration files in the conf/extra/ directory can be
+# included to add extra features or to modify the default configuration of
+# the server, or you may simply copy their contents here and change as
+# necessary.
+
+# Server-pool management (MPM specific)
+#Include conf/extra/httpd-mpm.conf
+
+# Multi-language error messages
+#Include conf/extra/httpd-multilang-errordoc.conf
+
+# Fancy directory listings
+#Include conf/extra/httpd-autoindex.conf
+
+# Language settings
+#Include conf/extra/httpd-languages.conf
+
+# User home directories
+#Include conf/extra/httpd-userdir.conf
+
+# Real-time info on requests and configuration
+#Include conf/extra/httpd-info.conf
+
+# Virtual hosts
+#Include conf/extra/httpd-vhosts.conf
+
+# Local access to the Apache HTTP Server Manual
+#Include conf/extra/httpd-manual.conf
+
+# Distributed authoring and versioning (WebDAV)
+#Include conf/extra/httpd-dav.conf
+
+# Various default settings
+#Include conf/extra/httpd-default.conf
+
+# Configure mod_proxy_html to understand HTML4/XHTML1
+<IfModule proxy_html_module>
+Include conf/extra/proxy-html.conf
+</IfModule>
+
+# Secure (SSL/TLS) connections
+Include conf/extra/httpd-ssl.conf
+#
+# Note: The following must must be present to support
+#       starting without SSL on platforms with no /dev/random equivalent
+#       but a statically compiled-in mod_ssl.
+#
+<IfModule ssl_module>
+SSLRandomSeed startup builtin
+SSLRandomSeed connect builtin
+</IfModule>
--- a/conf/bedrock/.env
+++ b/conf/bedrock/.env
@@ -0,0 +1,28 @@
+DB_NAME='database'
+DB_USER='user'
+DB_PASSWORD='password'
+
+# Optionally, you can use a data source name (DSN)
+# When using a DSN, you can remove the DB_NAME, DB_USER, DB_PASSWORD, and DB_HOST variables
+# DATABASE_URL='mysql://database_user:database_password@database_host:database_port/database_name'
+
+# Optional database variables
+# DB_HOST='localhost'
+DB_PREFIX='msp_'
+
+WP_ENV='development'
+WP_HOME='http://myshop.local'
+WP_SITEURL="${WP_HOME}/wp"
+
+# Specify optional debug.log path
+WP_DEBUG_LOG='./volume/debug_wp.log'
+
+# Generate your keys here: https://roots.io/salts.html
+AUTH_KEY='Eg=BeLLrsht,aKRBCU|YU>0EV`0TXE=$,nnIKW31Z+_O?[hwZ?tcL$9rI{R!#J@0'
+SECURE_AUTH_KEY='oM21iz!W$(<#yW>2`r%!Em9u}B/[(dA3eo3%r=P%55@vvxe$7Rxy>wT{#$Pj=SxK'
+LOGGED_IN_KEY='a=yF,Se|gfs(`iR[@OSpgI}6=+|4VWpPNFpMj)erzTXM#EOW6,9PI66;Tvwt$,fO'
+NONCE_KEY='K*1Z[Z3)p7+M2,%Eo>;RSvw*1ZR{(Nd%fO.9Oox%?}xYJT)wY-iKL;{?JtPp$%cC'
+AUTH_SALT='f{qK`ca-RdB.A53knAhxEaP7%+&.Vhtf;:4z:I50s6#Q#V;6eGIxf9@MS?HTmR%h'
+SECURE_AUTH_SALT='.jx$O)KH3w8e8Y{Gip;2L0tvztPDyiy>b.4K8>FCdj|w?ol)+6BR5#Mj^HM>?6bG'
+LOGGED_IN_SALT='Km.;Hl&]>&hH1kVGG#&9h_e88P+0E*A!C+Z5SBrY=^i92$`>.dEmAJvq43|HoK=_'
+NONCE_SALT='{qL6VtHmu{ijSdr4L|.5ruiM*R:tV+_..QW_gl58hE}_FG.:N2o86fB-63I3i-vG'
--- a/conf/mysql/config/mariadb.cnf
+++ b/conf/mysql/config/mariadb.cnf
@@ -0,0 +1,4 @@
+[mysqld]
+skip-networking=0
+skip-bind-address
+skip-name-resolve
--- a/conf/php/Dockerfile
+++ b/conf/php/Dockerfile
@@ -0,0 +1,73 @@
+ARG VERSION
+FROM php:${VERSION}
+# Environments
+ENV TZ=Europe/Paris
+ENV WORKDIR=/var/www/html/
+
+# Updates and installs system dependencies
+RUN apk add --update --no-cache \
+  bash \
+  tzdata \
+  libxml2-dev \
+  libpng-dev \
+  libjpeg-turbo-dev \
+  freetype-dev \
+  postgresql-dev \
+  libzip-dev \
+  libxslt-dev \
+  oniguruma-dev \
+  linux-headers \
+  imagemagick-dev \
+  $PHPIZE_DEPS && \
+  rm -rf /var/cache/apk/*
+
+RUN apk add --no-cache \
+  && docker-php-ext-install pdo \
+  && docker-php-ext-install pdo_mysql \
+  && docker-php-ext-install opcache \
+  && docker-php-ext-install bcmath \
+  && docker-php-ext-install zip
+# Configure php dependency
+RUN docker-php-ext-configure soap --enable-soap
+RUN docker-php-ext-configure gd --with-freetype --with-jpeg
+
+# Install php dependencies
+RUN docker-php-ext-install \
+  -j$(nproc) gd \
+  bcmath \
+  xml \
+  soap \
+  mbstring \
+  pdo \
+  pdo_mysql \
+  pdo_pgsql \
+  mysqli \
+  zip \
+  opcache \
+  intl \
+  xsl \
+  exif \
+  soap \
+  zip
+
+# Install pecl
+RUN pecl install xdebug && docker-php-ext-enable xdebug
+RUN pecl -v install redis && docker-php-ext-enable redis
+
+
+# Install composer
+RUN curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer
+
+# Workdir
+WORKDIR ${WORKDIR}
+
+# Copy files to container
+#COPY ./ ./
+
+# Expose port 9000 and start php-fpm server
+EXPOSE 9000
+
+# Run entrypoint
+COPY ./entrypoint.sh /usr/bin/docker-entrypoint
+RUN chmod +x /usr/bin/docker-entrypoint
+CMD [ "docker-entrypoint" ]
--- a/conf/php/entrypoint.sh
+++ b/conf/php/entrypoint.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+# composer install -o --working-dir="$WORKDIR"/application
+php-fpm
--- a/conf/scripts/create-cert.sh
+++ b/conf/scripts/create-cert.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+set -e
+source ".env"
+DOMAIN=$(echo "$DOMAIN")
+mkcert -install "${DOMAIN}"
+mkdir -p volume/certs
+find . -type f -name "*.pem" -exec mv {} volume/certs \;
--- a/docker-compose.dev.override.yml
+++ b/docker-compose.dev.override.yml
@@ -0,0 +1,12 @@
+version: "3.7"
+
+services:
+  pma:
+    image: arm64v8/phpmyadmin
+    container_name: ${PROJECT}.pma.${ENV}
+    networks:
+      - skeleton-docker.network
+    env_file: conf/.env/pma.env
+    ports:
+      - "8080:80"
+    restart: unless-stopped
--- a/docker-compose.dev.yml
+++ b/docker-compose.dev.yml
@@ -0,0 +1,70 @@
+version: "3.7"
+#--------------------------------------------------------------------
+#Solido DAMP V1.0: Dev stack for Prestashop / Wordpress / Laravel
+#Based on dev-docker-apache2.4-php8-mariadb10.1
+#https://github.com/Pixelao/dev-docker-apache2.4-php8-mariadb10.1
+#LABEL MAINTAINER="Adrián Martín Ramos <contacto@adrianmr.com>"
+#--------------------------------------------------------------------
+networks:
+  skeleton-docker.network:
+    driver: bridge
+
+services:
+  php:
+    build:
+      context: ./conf/php
+      args:
+        VERSION: ${PHPVERSION}-fpm-alpine
+    env_file: ./conf/.env/php.env
+    restart: always
+    tty: true
+    container_name: ${PROJECT}.php.${ENV}
+    networks:
+      - skeleton-docker.network
+    ports:
+      - "9000:9000"
+    volumes:
+      - ./volume/app/php:/usr/local/etc/php
+      - ./volume/www/:/var/www/
+      - ./volume/logs:/var/log/
+
+  apache:
+    build:
+      context: ./conf/apache
+      args:
+        SERVER_NAMEZ: ${DOMAIN}
+    restart: always
+    container_name: ${PROJECT}.apache.${ENV}
+    networks:
+      - skeleton-docker.network
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./volume/certs:/etc/certs
+      - ./volume/www/:/var/www/
+      - ./volume/logs:/usr/local/apache2/logs/
+
+  mariadb:
+    image: mariadb:10.1
+    tty: true
+    networks:
+      - skeleton-docker.network
+    restart: always
+    container_name: ${PROJECT}.mariadb.${ENV}
+    env_file: conf/.env/mariadb.env
+    ports:
+      - "3306:3306"
+    volumes:
+      - ./conf/mysql/config/mariadb.cnf:/etc/mysql/conf.d/custom.cnf:ro
+      - ./volume/mariadb:/var/lib/mysql
+
+  pma:
+    image: phpmyadmin
+    container_name: ${PROJECT}.pma.${ENV}
+    networks:
+      - skeleton-docker.network
+    env_file: conf/.env/pma.env
+    ports:
+      - "8080:80"
+    restart: unless-stopped
--- a/package-lock.json
+++ b/package-lock.json
@@ -0,0 +1,6 @@
+{
+  "name": "docker-shop-v3",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {}
+}
--- a/volume/app/bedrock/.env
+++ b/volume/app/bedrock/.env
@@ -0,0 +1,28 @@
+DB_NAME='database'
+DB_USER='user'
+DB_PASSWORD='password'
+
+# Optionally, you can use a data source name (DSN)
+# When using a DSN, you can remove the DB_NAME, DB_USER, DB_PASSWORD, and DB_HOST variables
+# DATABASE_URL='mysql://database_user:database_password@database_host:database_port/database_name'
+
+# Optional database variables
+# DB_HOST='localhost'
+DB_PREFIX='lsyp_'
+
+WP_ENV='development'
+WP_HOME='https://myshop.com'
+WP_SITEURL="${WP_HOME}/wp"
+
+# Specify optional debug.log path
+WP_DEBUG_LOG='volume/logs/debug.log'
+
+# Generate your keys here: https://roots.io/salts.html
+AUTH_KEY=';FKDx3Af@[X/697G<O,8(t45iPnW7m(!xRnyvPQCG#<^};jbYRiUOb]jeM=MJiH0'
+SECURE_AUTH_KEY='Z+_/m`63mkr:Ecnp/`(>3wcHmK`Q)`m^9q3%mv1_RE%%aDlrUhJi2?!U(9wx9r,h'
+LOGGED_IN_KEY='wPVt_gl7;sc}i7edX7lU5XSyPH@Wo9v$AU#_*OI-.R?HlO/dUk[J%/pC^mhdsO6>'
+NONCE_KEY='=}Q&|K4Zg()U.Qf7M@cSP`Jf:b<$/)@avIVmh8Xk*t;6-delKKj<%,mT#^t#!k3k'
+AUTH_SALT='/tI#nW4K@8!rkcVp$z^uyDIW4nKz,:Og-zHM>=(;o*%!r@<$.n}%PxqjAXFBL)SR'
+SECURE_AUTH_SALT='dP|z:%<LFy07a:0$%]#s8nb94{2vce`w%MCH;C0^T3<>rn;?}NE[&p|m:>PMt%Lo'
+LOGGED_IN_SALT='I+|UyIC!XpQr:YB[}dfY$d`^gt0cc&k:;szU/t.B8{EiqI=Uin@;J-{2.v]tsvqA'
+NONCE_SALT='>[_wi]9pI[??#?4QgL^.#3{zhP``%ixAY/a{Xskvog(0jh6%1NGK$a9{b*:1ib8]'
--- a/volume/app/bedrock/picostrap5-child.zip
+++ b/volume/app/bedrock/picostrap5-child.zip
--- a/volume/app/bedrock/picostrap5.zip
+++ b/volume/app/bedrock/picostrap5.zip
--- a/volume/app/bedrock/plugins.zip
+++ b/volume/app/bedrock/plugins.zip
--- a/volume/app/php/conf.d/20-xdebug.ini
+++ b/volume/app/php/conf.d/20-xdebug.ini
@@ -0,0 +1,8 @@
+
+zend_extension = xdebug.so
+xdebug.start_with_request = no
+xdebug.mode = debug
+xdebug.client_host = host.docker.internal
+xdebug.client_port = 9003
+xdebug.remote_cookie_expire_time = 36000
+xdebug.idekey=VSCODE
--- a/volume/app/php/conf.d/99-php.ini
+++ b/volume/app/php/conf.d/99-php.ini
@@ -0,0 +1,18 @@
+allow_url_fopen = On
+allow_url_include = Off
+asp_tags = Off
+display_errors = On
+display_startup_errors = On
+log_errors = On
+error_reporting = E_ALL
+enable_dl = Off
+file_uploads = On
+max_execution_time = 300
+max_input_time = 60
+max_input_vars = 100000
+memory_limit = 1024M
+session.gc_maxlifetime = 1440
+upload_max_filesize = 250M
+post_max_size = 500M
+max_file_uploads = 50
+date.timezone = Europe/Madrid
--- a/volume/app/php/php.ini
+++ b/volume/app/php/php.ini
--- a/volume/app/prestashop/defines.inc.php
+++ b/volume/app/prestashop/defines.inc.php
@@ -0,0 +1,234 @@
+<?php
+
+/**
+ * Copyright since 2007 PrestaShop SA and Contributors
+ * PrestaShop is an International Registered Trademark & Property of PrestaShop SA
+ *
+ * NOTICE OF LICENSE
+ *
+ * This source file is subject to the Open Software License (OSL 3.0)
+ * that is bundled with this package in the file LICENSE.md.
+ * It is also available through the world-wide-web at this URL:
+ * https://opensource.org/licenses/OSL-3.0
+ * If you did not receive a copy of the license and are unable to
+ * obtain it through the world-wide-web, please send an email
+ * to license@prestashop.com so we can send you a copy immediately.
+ *
+ * DISCLAIMER
+ *
+ * Do not edit or add to this file if you wish to upgrade PrestaShop to newer
+ * versions in the future. If you wish to customize PrestaShop for your
+ * needs please refer to https://devdocs.prestashop.com/ for more information.
+ *
+ * @author    PrestaShop SA and Contributors <contact@prestashop.com>
+ * @copyright Since 2007 PrestaShop SA and Contributors
+ * @license   https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
+ */
+
+/* Debug only */
+if (!defined('_PS_MODE_DEV_')) {
+    define('_PS_MODE_DEV_', true);
+}
+/* Compatibility warning */
+if (!defined('_PS_DISPLAY_COMPATIBILITY_WARNING_')) {
+    define('_PS_DISPLAY_COMPATIBILITY_WARNING_', false);
+}
+if (_PS_MODE_DEV_ === true) {
+    $errorReportingLevel = E_ALL | E_STRICT;
+    if (_PS_DISPLAY_COMPATIBILITY_WARNING_ === false) {
+        $errorReportingLevel = $errorReportingLevel & ~E_DEPRECATED & ~E_USER_DEPRECATED;
+    }
+    @ini_set('display_errors', 'on');
+    @error_reporting($errorReportingLevel);
+    define('_PS_DEBUG_SQL_', true);
+} else {
+    @ini_set('display_errors', 'on');
+    define('_PS_DEBUG_SQL_', false);
+}
+
+if (!defined('_PS_DEBUG_PROFILING_')) {
+    define('_PS_DEBUG_PROFILING_', false);
+}
+if (!defined('_PS_MODE_DEMO_')) {
+    define('_PS_MODE_DEMO_', false);
+}
+if (!defined('_PS_SMARTY_CACHING_TYPE_')) {
+    define('_PS_SMARTY_CACHING_TYPE_', 'filesystem');
+}
+if (!defined('_PS_ALLOW_MULTI_STATEMENTS_QUERIES_')) {
+    define('_PS_ALLOW_MULTI_STATEMENTS_QUERIES_', false);
+}
+
+if (!defined('_PS_DO_NOT_LOAD_CONFIGURATION_')) {
+    define('_PS_DO_NOT_LOAD_CONFIGURATION_', false);
+}
+
+$currentDir = dirname(__FILE__);
+
+if (!defined('_PS_ROOT_DIR_') && (getenv('_PS_ROOT_DIR_') || getenv('REDIRECT__PS_ROOT_DIR_'))) {
+    define('_PS_ROOT_DIR_', getenv('_PS_ROOT_DIR_') ? getenv('_PS_ROOT_DIR_') : getenv('REDIRECT__PS_ROOT_DIR_'));
+}
+
+/* Directories */
+if (!defined('_PS_ROOT_DIR_')) {
+    define('_PS_ROOT_DIR_', realpath($currentDir . '/..'));
+}
+
+if (!defined('_PS_CORE_DIR_')) {
+    define('_PS_CORE_DIR_', realpath($currentDir . '/..'));
+}
+
+define('_PS_ALL_THEMES_DIR_', _PS_ROOT_DIR_ . '/themes/');
+/* BO THEMES */
+if (defined('_PS_ADMIN_DIR_')) {
+    define('_PS_BO_ALL_THEMES_DIR_', _PS_ADMIN_DIR_ . '/themes/');
+}
+
+// Find if we are running under a Symfony command
+$cliEnvValue = null;
+if (isset($argv) && is_array($argv)) {
+    if (in_array('--env', $argv)) {
+        $cliEnvValue = $argv[array_search('--env', $argv) + 1];
+    } elseif (in_array('-e', $argv)) {
+        $cliEnvValue = $argv[array_search('-e', $argv) + 1];
+    }
+}
+
+if ((defined('_PS_IN_TEST_') && _PS_IN_TEST_)
+    || $cliEnvValue === 'test'
+) {
+    define('_PS_ENV_', 'test');
+} else {
+    define('_PS_ENV_', _PS_MODE_DEV_ ? 'dev' : 'prod');
+}
+
+if (!defined('_PS_CACHE_DIR_')) {
+    define('_PS_CACHE_DIR_', _PS_ROOT_DIR_ . '/var/cache/' . _PS_ENV_ . DIRECTORY_SEPARATOR);
+}
+
+define('_PS_CONFIG_DIR_', _PS_CORE_DIR_ . '/config/');
+define('_PS_CUSTOM_CONFIG_FILE_', _PS_CONFIG_DIR_ . 'settings_custom.inc.php');
+define('_PS_CLASS_DIR_', _PS_CORE_DIR_ . '/classes/');
+if (!defined('_PS_DOWNLOAD_DIR_')) {
+    $dir = (defined('_PS_IN_TEST_') && _PS_IN_TEST_) ? '/tests/Resources/download/' : '/download/';
+    define('_PS_DOWNLOAD_DIR_', _PS_ROOT_DIR_ . $dir);
+}
+define('_PS_MAIL_DIR_', _PS_CORE_DIR_ . '/mails/');
+if (!defined('_PS_MODULE_DIR_')) {
+    define('_PS_MODULE_DIR_', _PS_ROOT_DIR_ . '/modules/');
+}
+if (!defined('_PS_OVERRIDE_DIR_')) {
+    define('_PS_OVERRIDE_DIR_', _PS_ROOT_DIR_ . '/override/');
+}
+define('_PS_PDF_DIR_', _PS_CORE_DIR_ . '/pdf/');
+define('_PS_TRANSLATIONS_DIR_', _PS_ROOT_DIR_ . '/translations/');
+if (!defined('_PS_UPLOAD_DIR_')) {
+    define('_PS_UPLOAD_DIR_', _PS_ROOT_DIR_ . '/upload/');
+}
+define('_PS_CONTROLLER_DIR_', _PS_CORE_DIR_ . '/controllers/');
+define('_PS_ADMIN_CONTROLLER_DIR_', _PS_CORE_DIR_ . '/controllers/admin/');
+define('_PS_FRONT_CONTROLLER_DIR_', _PS_CORE_DIR_ . '/controllers/front/');
+
+define('_PS_TOOL_DIR_', _PS_CORE_DIR_ . '/tools/');
+if (!defined('_PS_GEOIP_DIR_')) {
+    define('_PS_GEOIP_DIR_', _PS_CORE_DIR_ . '/app/Resources/geoip/');
+}
+if (!defined('_PS_GEOIP_CITY_FILE_')) {
+    define('_PS_GEOIP_CITY_FILE_', 'GeoLite2-City.mmdb');
+}
+
+define('_PS_VENDOR_DIR_', _PS_CORE_DIR_ . '/vendor/');
+
+define('_PS_IMG_SOURCE_DIR_', _PS_ROOT_DIR_ . '/img/');
+if (!defined('_PS_IMG_DIR_')) {
+    $dir = (defined('_PS_IN_TEST_') && _PS_IN_TEST_) ? '/tests/Resources/img/' : '/img/';
+    define('_PS_IMG_DIR_', _PS_ROOT_DIR_ . $dir);
+}
+
+define('_PS_CORE_IMG_DIR_', _PS_CORE_DIR_ . '/img/');
+define('_PS_CAT_IMG_DIR_', _PS_IMG_DIR_ . 'c/');
+define('_PS_COL_IMG_DIR_', _PS_IMG_DIR_ . 'co/');
+define('_PS_EMPLOYEE_IMG_DIR_', _PS_IMG_DIR_ . 'e/');
+define('_PS_GENDERS_DIR_', _PS_IMG_DIR_ . 'genders/');
+define('_PS_LANG_IMG_DIR_', _PS_IMG_DIR_ . 'l/');
+define('_PS_MANU_IMG_DIR_', _PS_IMG_DIR_ . 'm/');
+define('_PS_ORDER_STATE_IMG_DIR_', _PS_IMG_DIR_ . 'os/');
+define('_PS_PRODUCT_IMG_DIR_', _PS_IMG_DIR_ . 'p/');
+// @deprecated since 1.7.8.1 version use _PS_PRODUCT_IMG_DIR_ instead
+define('_PS_PROD_IMG_DIR_', _PS_PRODUCT_IMG_DIR_);
+define('_PS_PROFILE_IMG_DIR_', _PS_IMG_DIR_ . 'pr/');
+define('_PS_SHIP_IMG_DIR_', _PS_IMG_DIR_ . 's/');
+define('_PS_STORE_IMG_DIR_', _PS_IMG_DIR_ . 'st/');
+define('_PS_SUPP_IMG_DIR_', _PS_IMG_DIR_ . 'su/');
+define('_PS_TMP_IMG_DIR_', _PS_IMG_DIR_ . 'tmp/');
+
+/* settings php */
+define('_PS_TRANS_PATTERN_', '(.*[^\\\\])');
+define('_PS_MIN_TIME_GENERATE_PASSWD_', '360');
+
+if (!defined('_PS_MAGIC_QUOTES_GPC_')) {
+    define('_PS_MAGIC_QUOTES_GPC_', false);
+}
+
+define('_CAN_LOAD_FILES_', 1);
+
+/* Order statuses
+Order statuses have been moved into config.inc.php file for backward compatibility reasons */
+
+/* Tax behavior */
+define('PS_PRODUCT_TAX', 0);
+define('PS_STATE_TAX', 1);
+define('PS_BOTH_TAX', 2);
+
+define('PS_TAX_EXC', 1);
+define('PS_TAX_INC', 0);
+
+define('PS_ROUND_UP', 0);
+define('PS_ROUND_DOWN', 1);
+define('PS_ROUND_HALF_UP', 2);
+define('PS_ROUND_HALF_DOWN', 3);
+define('PS_ROUND_HALF_EVEN', 4);
+define('PS_ROUND_HALF_ODD', 5);
+
+/* Backward compatibility */
+define('PS_ROUND_HALF', PS_ROUND_HALF_UP);
+
+/* Carrier::getCarriers() filter */
+// these defines are DEPRECATED since 1.4.5 version
+define('PS_CARRIERS_ONLY', 1);
+define('CARRIERS_MODULE', 2);
+define('CARRIERS_MODULE_NEED_RANGE', 3);
+define('PS_CARRIERS_AND_CARRIER_MODULES_NEED_RANGE', 4);
+define('ALL_CARRIERS', 5);
+
+/* SQL Replication management */
+define('_PS_USE_SQL_SLAVE_', false);
+
+/* PS Technical configuration */
+define('_PS_ADMIN_PROFILE_', 1);
+
+/* Stock Movement */
+define('_STOCK_MOVEMENT_ORDER_REASON_', 3);
+define('_STOCK_MOVEMENT_MISSING_REASON_', 4);
+
+define('_PS_CACHEFS_DIRECTORY_', _PS_ROOT_DIR_ . '/cache/cachefs/');
+
+/* Geolocation */
+define('_PS_GEOLOCATION_NO_CATALOG_', 0);
+define('_PS_GEOLOCATION_NO_ORDER_', 1);
+
+define('MIN_PASSWD_LENGTH', 8);
+
+define('_PS_SMARTY_NO_COMPILE_', 0);
+define('_PS_SMARTY_CHECK_COMPILE_', 1);
+define('_PS_SMARTY_FORCE_COMPILE_', 2);
+
+define('_PS_SMARTY_CONSOLE_CLOSE_', 0);
+define('_PS_SMARTY_CONSOLE_OPEN_BY_URL_', 1);
+define('_PS_SMARTY_CONSOLE_OPEN_', 2);
+
+if (!defined('_PS_JQUERY_VERSION_')) {
+    define('_PS_JQUERY_VERSION_', '3.4.1');
+}
+
+define('_PS_CACHE_CA_CERT_FILE_', _PS_CACHE_DIR_ . 'cacert.pem');
--- a/volume/app/prestashop/falconchild.zip
+++ b/volume/app/prestashop/falconchild.zip
--- a/volume/app/prestashop/parameters.php
+++ b/volume/app/prestashop/parameters.php
@@ -0,0 +1,64 @@
+<?php return array(
+  'parameters' =>
+  array(
+    'database_host' => 'mariadb',
+    'database_port' => '',
+    'database_name' => 'database',
+    'database_user' => 'user',
+    'database_password' => 'password',
+    'database_prefix' => 'msp_',
+    'database_engine' => 'InnoDB',
+    'mailer_transport' => 'smtp',
+    'mailer_host' => '127.0.0.1',
+    'mailer_user' => NULL,
+    'mailer_password' => NULL,
+    'secret' => 'kDwmvqnrd9mS13a0dfZ2K4Am9pdzKGw9xxxw7syZfguVUuv2IwT8MmvE4Ksx1Nyi',
+    'ps_caching' => 'CacheMemcache',
+    'ps_cache_enable' => false,
+    'ps_creation_date' => '2024-02-19',
+    'locale' => 'fr-FR',
+    'use_debug_toolbar' => true,
+    'cookie_key' => 'QDYqIHUFHK8XQwxGf76bJeppkiTCWWvSxPSsKXNkGsucunmKDbXazbCQUjueig8F',
+    'cookie_iv' => 'jrbOhE4Xrvz6LRfIdyj5K9EsQ2ZzAqT3',
+    'new_cookie_key' => 'def00000221a8709859c3298458e563796b9bd4ea629c0fdfc10e732deeef10172a6937fea4dad4d8182e1b6df3c6ea8ab67ae63b5f5ce6ecdb35b1ad754b0af9bad6469',
+    'api_public_key' => '-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu96wTO6nA2dq4qBdlwGg
+y8GwdwkYSZyrowFa9mHE7Szs97SEdoo2DRjM9nsridL56F0wA8XznIynZtn5mEvV
+L84UIpbIdpLole/zGHGyadHhLA0lT9GBz76N/3JHn+hrxX0IvYnZxqjxKl2hhyjc
+5ZeVAqaL7Nb5oydiToicaKXZiezI1XZa04mHiFRyN09cDMVBYErfJz1QZBpdNPQP
+ROFpYktNFvD8Qk+FanF03++b1SoWNJk/VUSe0gSOUW3/g+hpuc8/YRcyJYdY7ohn
+xgUGtRI11Nawwv0PF1ZKZiOS7QjKjHPlTCea8J9ZAsz1lENclVjONahWH2pv+RjQ
+9wIDAQAB
+-----END PUBLIC KEY-----
+',
+    'api_private_key' => '-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
+',
+  ),
+);
--- a/volume/app/www/html/info.php
+++ b/volume/app/www/html/info.php
@@ -0,0 +1,2 @@
+<?php
+echo (phpinfo());