Release 2 (v2)

[rija]

I'm currently preparing release 2 for this project.

Release content (headlines):

• Upgraded PHP to PHP 7.0 for much improved performance
• Upgraded base OS to Ubuntu 16.04 LTS
• Deployed Nginx from the stable line, compiled with ngx_cache_purge, currently 1.10.1
• HTTP/2 and SSL enabled by default
• Use of Ubuntu packages for Supervisord and LetsEncrypt
• Enabled automated security updates using the Ubuntu unattended-upgrades package
• Minimised the number of processes running as root inside the container
• LetsEncrypt certificate for nginx is automatically renewed
• The Wordpress container communicates with its host's Docker API to find the database container's address
• Made better usage of Supervisord, for consolidating process logs, and as the ID 1 process
• docker compose YAML file to easilily deploy the full stack

Status:

I need to finish the last point regarding Supervisord as ID 1 process, use the Docker image on a staging site for testing and then tag a new release.

[rija]

Final changelog:

• Supervisord 3.0 is PID 1 and properly manages all the processes in the container
• Uses PHP 7.1
• TLS encryption with Let's Encrypt and automated certificate renewal, configured using Mozilla intermediary profile for server side TLS
• Use Nginx 1.13.0 with real_ip, HTTP/2 and TLSv1.3 configured
• FastCGI page caching and cache purge compiled in Nginx
• docker-compose is now the preferred way to use this Dockerfile, directly or through Ansible
• The deployment now relies on git for installing vanilla Wordpress or a Wordpress based web site
• Security has been improved on many layers:
  • Setup of Fail2ban for black-listing ip addresses of attackers
  • Tightening of file permissions and configuration of server processess and bootstrapping scripts
  • Security headers in Nginx responses
  • Pre-installed WP Plugins for using Fail2Ban, reducing XML-RPC attack surface, and enabling Content Security Policy
  • PGP signature verification of downloaded package through APT or CURL
• The Docker image size has been significantly reduced (from 599MB/46layers to 186.1MB/25layers)
• uses WP-CLI for managing Wordpress