Docker Containers
Conarx Containers - PrivateBin Docker Image

Repository

server {
	listen [::]:80 ipv6only=off;
	server_name localhost;

	root /var/www/html;
	index index.php;

	location = /favicon.ico {
		log_not_found off;
		access_log off;
	}

	location = /robots.txt {
		allow all;
		log_not_found off;
		access_log off;
	}

	location ~ ^\/(?:bin|cfg|i18n|lib|tpl|vendor)\/ {
		deny all;
	}

	location ~* \.(js|css|gif|ico|jpg|jpeg|png)$ {
		expires max;
	}

	# Check for user agent match for terminal tools
	set $tb "";
	if ($http_user_agent ~* "^(curl\/|Wget)") {
		set $tb ua;
	}
	# Check for method match
	if ($request_method = POST) {
		set $tb "${tb}method";
	}
	# Check both matched and trigger rewrite
	if ($tb = "uamethod") {
		rewrite ^/$ /termbin.php break;
	}

	location / {
		try_files $uri $uri/ /index.php?$args;
	}

	location ~ [^/]\.php(/|$) {
		# Mitigation against vulnerabilities in php-fpm, just incase
		fastcgi_split_path_info ^(.+?\.php)(/.*)$;

		# Make sure document exists
		if (!-f $document_root$fastcgi_script_name) {
			return 404;
		}

		# Mitigate https://httpoxy.org/ vulnerabilities
		fastcgi_param HTTP_PROXY "";

		# Pass request to php-fpm
		fastcgi_pass unix:/run/php-fpm.sock;
		fastcgi_index index.php;

		# Include fastcgi_params settings
		include fastcgi_params;

		# php-fpm requires the SCRIPT_FILENAME to be set
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

		fastcgi_param REDIRECT_STATUS 200;
	}
}
version: '3'

services:
  privatebin:
    image: registry.conarx.tech/containers/privatebin
	environment:
	  PRIVATEBIN_MODEL_OPTIONS_DSN: "mysql:host=localhost;dbname=privatebin;charset=UTF8"
	  PRIVATEBIN_MODEL_OPTIONS_USR: privatebin
	  PRIVATEBIN_MODEL_OPTIONS_PWD: privatebin
    ports:
      - '8080:80'
    volumes:
      # Web root
      - ./data/www:/var/www/html
      # NextCloud data
      - ./data/privatebin-data:/var/www/privatebin-data
      # Nginx config
      - ./config/nginx.conf:/etc/nginx/http.d/50_vhost_default.conf:ro
      # PHP ini customizations
      - ./config/php.ini:/etc/php8/conf.d/99-privatebin.ini
      # PHP fpm config
      - ./config/php-fpm-www.conf:/etc/php8/php-fpm.d/zzz-www-override.conf
    depends_on:
      - mariadb
    networks:
      - internal

  mariadb:
    image: registry.conarx.tech/containers/mariadb
    environment:
      MYSQL_DATABASE: 'privatebin'
      MYSQL_USER: 'privatebin'
      MYSQL_PASSWORD: 'privatebin'
      MYSQL_ROOT_PASSWORD: 'privatebin'
    volumes:
      # MariaDB data
      - ./data/mariadb:/var/lib/mysql
    networks:
      - internal