@scandipwa/magento-scripts 1.14.1-alpha.0 → 1.14.1-alpha.11

package/index.js

@@ -5,6 +5,19 @@ const getLatestVersion = require('@scandipwa/scandipwa-dev-utils/latest-version'
 const logger = require('@scandipwa/scandipwa-dev-utils/logger');
 const semver = require('semver');
 const isInstalledGlobally = require('is-installed-globally');
+const isRunningRoot = require('./lib/util/is-running-root');
+
+if (isRunningRoot()) {
+    logger.error('Root privileges detected!');
+    console.log(`
+We detected that you are running ${ logger.style.misc('magento-scripts') } as root user.
+We cannot allow you to run ${ logger.style.misc('magento-scripts') } with root privileges, this will only cause more problems.
+
+If you are experiencing problems with ${ logger.style.misc('Docker') }, ${ logger.style.misc('PHPBrew') } and ${ logger.style.misc('PHP') } compilation or ${ logger.style.misc('Magento') } setup, running ${ logger.style.misc('magento-scripts') } as root will not solve those problems.
+`);
+
+    process.exit(1);
+}
 
 const commands = [
     require('./lib/commands/link'),

package/lib/commands/cli.js

@@ -7,6 +7,7 @@ const getProjectConfiguration = require('../config/get-project-configuration');
 const localAuthJson = require('../tasks/composer/local-auth-json');
 const checkConfigurationFile = require('../config/check-configuration-file');
 const { installComposer, installPrestissimo } = require('../tasks/composer');
+const ConsoleBlock = require('../util/console-block');
 
 /**
  * @param {import('yargs')} yargs
@@ -30,13 +31,39 @@ module.exports = (yargs) => {
             rendererOptions: { collapse: false, clearOutput: true }
         });
 
+        let ctx;
         try {
-            await tasks.run();
+            ctx = await tasks.run();
         } catch (e) {
             logger.error(e.message || e);
             process.exit(1);
         }
 
+        const block = new ConsoleBlock();
+
+        block
+            .addHeader('Create Magento App CLI')
+            .addEmptyLine()
+            .addLine(`Available aliases: ${logger.style.command('php')}, ${logger.style.command('magento')}, ${logger.style.command('composer')}`)
+            .addLine(`Available shortcuts: magento -> ${logger.style.command('m')}, composer -> ${logger.style.command('c')}`)
+            .addEmptyLine();
+
+        if (ctx.config.overridenConfiguration.configuration.varnish.enabled) {
+            block.addLine(`Clear Varnish cache: ${logger.style.command('cvc')}`);
+        }
+
+        block
+            .addLine(`Clear Magento cache: ${logger.style.command('m c:c')}`)
+            .addLine(`Magento setup upgrade: ${logger.style.command('m se:up')}`)
+            .addLine(`Magento DI compile: ${logger.style.command('m s:d:c')}`);
+
+        block
+            .addEmptyLine()
+            .addLine(`Clear Composer cache: ${logger.style.command('c cc')}`)
+            .addEmptyLine();
+
+        block.log();
+
         return cli();
     });
 };

package/lib/commands/execute.js

@@ -16,7 +16,8 @@ Available containers:
 - mysql
 - nginx
 - redis
-- elasticsearch`);
+- elasticsearch
+- varnish (if enabled)`);
         },
         async (argv) => {
             const containers = (await docker).getContainers();

package/lib/commands/logs.js

@@ -18,6 +18,7 @@ Available scopes:
 - redis
 - nginx
 - elasticsearch
+- varnish (if enabled)
 
 And you can use name matching:
 npm run logs ma (will match magento)

package/lib/commands/start.js

@@ -4,12 +4,14 @@ const { Listr } = require('listr2');
 const { start } = require('../tasks/start');
 const pathExists = require('../util/path-exists');
 const { baseConfig } = require('../config');
-const googleAnalytics = require('@scandipwa/scandipwa-dev-utils/analytics');
+const googleAnalytics = require('../util/analytics');
 const systeminformation = require('systeminformation');
 const { getCSAThemes } = require('../util/CSA-theme');
 const shouldUseYarn = require('@scandipwa/scandipwa-dev-utils/should-use-yarn');
 const ConsoleBlock = require('../util/console-block');
 const { getInstanceMetadata } = require('../util/instance-metadata');
+const UnknownError = require('../errors/unknown-error');
+const KnownError = require('../errors/known-error');
 
 const cmaGaTrackingId = 'UA-127741417-7';
 
@@ -156,8 +158,8 @@ module.exports = (yargs) => {
                 }
 
                 try {
+                    await googleAnalytics.trackTiming('CMA start time', Date.now() - timeStamp);
                     if (!process.isFirstStart) {
-                        await googleAnalytics.trackTiming('CMA start time', Date.now() - timeStamp);
                         googleAnalytics.printAboutAnalytics();
                         process.exit(0);
                     }
@@ -171,7 +173,6 @@ module.exports = (yargs) => {
                     const paramInfo = `Platform: ${platform} ${kernel}, CPU model: ${manufacturer} ${brand}, RAM amount: ${totalRam}MB`;
 
                     await googleAnalytics.trackEvent('Params', paramInfo, 0, 'OS');
-                    await googleAnalytics.trackTiming('CMA first start time', Date.now() - timeStamp);
                     googleAnalytics.printAboutAnalytics();
                 } catch (e) {
                     await googleAnalytics.trackError(e.message || e);
@@ -179,8 +180,20 @@ module.exports = (yargs) => {
 
                 process.exit(0);
             } catch (e) {
-                logger.error(e.message || e);
-                await googleAnalytics.trackError(e.message || e);
+                if (e instanceof UnknownError || e instanceof KnownError) {
+                    logger.error(e.message);
+                    if (e instanceof UnknownError) {
+                        await googleAnalytics.trackError(`Unknown Error: ${e.stack}`);
+                    } else {
+                        await googleAnalytics.trackError(`Known Error: ${e.message}`);
+                    }
+                } else if (e instanceof Error) {
+                    logger.error(e.message);
+                    await googleAnalytics.trackError(`Regular Error: ${e.message}`);
+                } else {
+                    logger.error(e);
+                    await googleAnalytics.trackError(`Non Error: ${e}`); // track non-errors throws
+                }
                 process.exit(1);
             }
         }

package/lib/config/dependencies-for-platforms.js

@@ -51,7 +51,12 @@ const dependenciesForPlatforms = {
             'libsodium',
             'libsodium-devel',
             'libtool-ltdl-devel',
-            'oniguruma-devel'
+            'oniguruma-devel',
+            'libxml2-devel',
+            'bzip2-devel',
+            'curl-devel',
+            'libxslt-devel',
+            'autoconf'
         ],
         installCommand: (deps) => `sudo yum install ${deps} -y`,
         packageManager: 'yum'
@@ -68,7 +73,12 @@ const dependenciesForPlatforms = {
             'libsodium',
             'libsodium-devel',
             'libtool-ltdl-devel',
-            'oniguruma-devel'
+            'oniguruma-devel',
+            'libxml2-devel',
+            'bzip2-devel',
+            'curl-devel',
+            'libxslt-devel',
+            'autoconf'
         ],
         installCommand: (deps) => `sudo yum install --enablerepo=PowerTools ${deps} -y`,
         packageManager: 'yum'

package/lib/config/docker.js

@@ -12,7 +12,8 @@ module.exports = async ({ configuration, ssl, host }, config) => {
         redis,
         mysql,
         elasticsearch,
-        mariadb
+        mariadb,
+        varnish
     } = configuration;
 
     const {
@@ -42,7 +43,7 @@ module.exports = async ({ configuration, ssl, host }, config) => {
     const isLinux = os.platform() === 'linux';
     const isWsl = await getIsWsl();
     const isArm = (await getArch()) === 'arm64';
-    const isArmMac = (os.platform() === 'darwin') && isArm;
+    const isNotNativeLinux = (!isLinux || isWsl);
 
     if (!isLinux) {
         /**
@@ -53,7 +54,7 @@ module.exports = async ({ configuration, ssl, host }, config) => {
             name: `${ prefix }_nginx-data`,
             opts: {
                 type: 'nfs',
-                device: `${cacheDir}/nginx/conf.d`,
+                device: path.join(cacheDir, 'nginx', 'conf.d'),
                 o: 'bind'
             }
         };
@@ -61,7 +62,7 @@ module.exports = async ({ configuration, ssl, host }, config) => {
             name: `${ prefix }_pub-data`,
             opts: {
                 type: 'nfs',
-                device: `${ path.join(magentoDir, 'pub') }`,
+                device: path.join(magentoDir, 'pub'),
                 o: 'bind'
             }
         };
@@ -69,18 +70,62 @@ module.exports = async ({ configuration, ssl, host }, config) => {
             name: `${ prefix }_setup-data`,
             opts: {
                 type: 'nfs',
-                device: `${path.join(magentoDir, 'setup')}`,
+                device: path.join(magentoDir, 'setup'),
                 o: 'bind'
             }
         };
+        volumes.sslTerminator = {
+            name: `${ prefix }_ssl-terminator-data`,
+            opts: {
+                type: 'nfs',
+                device: path.join(cacheDir, 'ssl-terminator', 'conf.d'),
+                o: 'bind'
+            }
+        };
+
+        if (varnish.enabled) {
+            volumes.varnish = {
+                name: `${ prefix }_varnish-data`,
+                opts: {
+                    type: 'nfs',
+                    device: path.join(cacheDir, 'varnish'),
+                    o: 'bind'
+                }
+            };
+        }
     }
 
     const getContainers = (ports = {}) => {
         const dockerConfig = {
+            sslTerminator: {
+                _: 'SSL Terminator (Nginx)',
+                ports: isNotNativeLinux ? [
+                    `${ isIpAddress(host) ? host : '127.0.0.1' }:${ ports.sslTerminator }:80`
+                ] : [],
+                healthCheck: {
+                    cmd: 'service nginx status'
+                },
+                /**
+                 * Mount volumes directly on linux
+                 */
+                mountVolumes: [
+                    `${ isLinux ? path.join(cacheDir, 'ssl-terminator', 'conf.d') : volumes.sslTerminator.name }:/etc/nginx/conf.d`
+                ],
+                restart: 'on-failure:5',
+                // TODO: use connect instead
+                network: isNotNativeLinux ? network.name : 'host',
+                image: `nginx:${ nginx.version }`,
+                imageDetails: {
+                    name: 'nginx',
+                    tag: nginx.version
+                },
+                name: `${ prefix }_ssl-terminator`,
+                command: "nginx -g 'daemon off;'"
+            },
             nginx: {
                 _: 'Nginx',
-                ports: (!isLinux || isWsl) ? [
-                    `${isIpAddress(host) ? host : '127.0.0.1'}:${ ports.app }:80`
+                ports: isNotNativeLinux ? [
+                    `${ isIpAddress(host) ? host : '127.0.0.1' }:${ ports.app }:80`
                 ] : [],
                 healthCheck: {
                     cmd: 'service nginx status'
@@ -99,7 +144,7 @@ module.exports = async ({ configuration, ssl, host }, config) => {
                 ],
                 restart: 'on-failure:5',
                 // TODO: use connect instead
-                network: (!isLinux || isWsl) ? network.name : 'host',
+                network: isNotNativeLinux ? network.name : 'host',
                 image: `nginx:${ nginx.version }`,
                 imageDetails: {
                     name: 'nginx',
@@ -126,7 +171,7 @@ module.exports = async ({ configuration, ssl, host }, config) => {
                 connectCommand: ['redis-cli']
             },
             mysql: {
-                _: !isArmMac ? 'MySQL' : 'MariaDB',
+                _: !isArm ? 'MySQL' : 'MariaDB',
                 healthCheck: {
                     cmd: 'mysqladmin ping --silent'
                 },
@@ -148,21 +193,22 @@ module.exports = async ({ configuration, ssl, host }, config) => {
                 command: [
                     '--log_bin_trust_function_creators=1',
                     '--default-authentication-plugin=mysql_native_password',
-                    '--max_allowed_packet=1GB'
+                    '--max_allowed_packet=1GB',
+                    '--bind-address=0.0.0.0'
                 ].join(' '),
                 securityOptions: [
                     'seccomp=unconfined'
                 ],
                 network: network.name,
-                image: !isArmMac ? `mysql:${ mysql.version }` : `mariadb:${ mariadb.version }`,
-                imageDetails: !isArmMac ? {
+                image: !isArm ? `mysql:${ mysql.version }` : `mariadb:${ mariadb.version }`,
+                imageDetails: !isArm ? {
                     name: 'mysql',
                     tag: mysql.version
                 } : {
                     name: 'mariadb',
                     tag: mariadb.version
                 },
-                name: !isArmMac ? `${ prefix }_mysql` : `${ prefix }_mariadb`
+                name: !isArm ? `${ prefix }_mysql` : `${ prefix }_mariadb`
             },
             elasticsearch: {
                 _: 'ElasticSearch',
@@ -180,9 +226,9 @@ module.exports = async ({ configuration, ssl, host }, config) => {
                     'xpack.ml.enabled': ['sse4.2', 'sse4_2'].some((sse42Flag) => cpuSupportedFlags.includes(sse42Flag))
                 },
                 network: network.name,
-                image: `docker.elastic.co/elasticsearch/elasticsearch:${ elasticsearch.version }`,
+                image: `elasticsearch:${ elasticsearch.version }`,
                 imageDetails: {
-                    name: 'docker.elastic.co/elasticsearch/elasticsearch',
+                    name: 'elasticsearch',
                     tag: elasticsearch.version
                 },
                 name: `${ prefix }_elasticsearch`
@@ -195,6 +241,34 @@ module.exports = async ({ configuration, ssl, host }, config) => {
             );
         }
 
+        if (varnish.enabled) {
+            dockerConfig.varnish = {
+                _: 'Varnish',
+                image: `varnish:${ varnish.version }`,
+                imageDetails: {
+                    name: 'varnish',
+                    tag: varnish.version
+                },
+                name: `${ prefix }_varnish`,
+                mountVolumes: [
+                    `${ isLinux ? path.join(cacheDir, 'varnish') : volumes.varnish.name }:/etc/varnish`
+                ],
+                ports: isNotNativeLinux ? [
+                    `${ isIpAddress(host) ? host : '127.0.0.1' }:${ ports.varnish }:80`
+                ] : [],
+                env: {
+                    VARNISH_SIZE: '2G'
+                },
+                restart: 'on-failure:30',
+                network: isNotNativeLinux ? network.name : 'host',
+                // eslint-disable-next-line max-len
+                command: `/bin/bash -c "varnishd -a :${ isNotNativeLinux ? 80 : ports.varnish } -t 600 -f /etc/varnish/default.vcl -s malloc,512m && varnishlog"`,
+                tmpfs: [
+                    '/var/lib/varnish:exec'
+                ]
+            };
+        }
+
         return dockerConfig;
     };
 

package/lib/config/get-port-config.js

@@ -1,6 +1,7 @@
 const fs = require('fs');
 const path = require('path');
 const { baseConfig } = require('.');
+const KnownError = require('../errors/known-error');
 const pathExists = require('../util/path-exists');
 const {
     getPort,
@@ -26,6 +27,10 @@ const getAvailablePorts = () => ({
                     'utf-8'
                 )
             );
+            if (!ports.sslTerminator) {
+                ports.sslTerminator = ports.app;
+                ports.app = defaultPorts.app;
+            }
         }
         const {
             systemConfiguration: {
@@ -39,9 +44,9 @@ const getAvailablePorts = () => ({
         if (ctx.port) {
             const isPortAvailable = (await getPort(ctx.port)) === ctx.port;
             if (!isPortAvailable) {
-                throw new Error(`Port ${ctx.port} is not available`);
+                throw new KnownError(`Port ${ctx.port} is not available`);
             } else {
-                availablePorts.app = ctx.port;
+                availablePorts.sslTerminator = ctx.port;
             }
         }
 
@@ -51,7 +56,7 @@ const getAvailablePorts = () => ({
 });
 
 /**
- * @type {import('listr2').ListrTask<import('../../typings/context').ListrContext>}
+ * @type {() => import('listr2').ListrTask<import('../../typings/context').ListrContext>}
  */
 const getCachedPorts = () => ({
     title: 'Getting cached ports',
@@ -65,6 +70,7 @@ const getCachedPorts = () => ({
                     'utf-8'
                 )
             );
+            ctx.cachedPorts = { ...ports };
         } else {
             ports = { ...defaultPorts };
         }

package/lib/config/index.js

@@ -10,6 +10,7 @@ const { getMagentoConfig } = require('./magento-config');
 const { getPhpStormConfig } = require('./phpstorm/debug-config');
 const resolveConfigurationWithOverrides = require('../util/resolve-configuration-with-overrides');
 const { getPrefix, folderName } = require('../util/prefix');
+const UnknownError = require('../errors/unknown-error');
 
 const platforms = ['linux', 'darwin'];
 const darwinMinimalVersion = '10.5';
@@ -38,7 +39,7 @@ module.exports = {
         const newBaseConfig = getBaseConfig(projectPath, prefix);
         const configurations = getConfigurations(newBaseConfig);
         if (!configurations[magentoVersion]) {
-            throw new Error(`No config found for magento version ${magentoVersion}`);
+            throw new UnknownError(`No config found for magento version ${magentoVersion}`);
         }
 
         const {

package/lib/config/php/extensions/libsodium.js

@@ -2,6 +2,7 @@ const path = require('path');
 const fs = require('fs');
 const os = require('os');
 const pathExists = require('../../../util/path-exists');
+const UnknownError = require('../../../errors/unknown-error');
 
 /**
  * @type {import('../../../../typings/index').PHPExtension}
@@ -21,7 +22,7 @@ module.exports = {
             );
 
             if (!await pathExists(sodiumDynamicLibraryPath)) {
-                throw new Error(`libsodium dynamic library file configuration not found: ${sodiumDynamicLibraryPath}`);
+                throw new UnknownError(`libsodium dynamic library file configuration not found: ${sodiumDynamicLibraryPath}`);
             }
             const fileContent = await fs.promises.readFile(sodiumDynamicLibraryPath, 'utf-8');
 

package/lib/config/port-config.js

@@ -54,7 +54,9 @@ const savePortsConfig = async (ports) => {
 
 // Map of default ports (key:value)
 const defaultPorts = {
-    app: 80,
+    app: 3031,
+    varnish: 8080,
+    sslTerminator: 80,
     fpm: 9000,
     xdebug: 9111,
     mysql: 3306,

package/lib/config/scandipwa-versions.js

@@ -9,7 +9,8 @@ const scandipwaMagentoVersionMapping = {
     '2.4.0': '3.1.0 - 3.1.6',
     '2.4.1': '3.2.0 - 4.2.1',
     '2.4.2': '4.3.0 - 5.0.3',
-    '2.4.3': '5.0.4'
+    '2.4.3': '5.0.4 - 5.2.7',
+    '2.4.4': '5.3.0+'
 };
 
 module.exports = scandipwaMagentoVersionMapping;

package/lib/config/ssl-terminator/index.js

@@ -0,0 +1,10 @@
+const path = require('path');
+
+const sslTerminator = ({ templateDir }) => ({
+    version: '1.18.0',
+    configTemplate: path.join(templateDir || '', 'ssl-terminator.template.conf')
+});
+
+module.exports = {
+    sslTerminator
+};

package/lib/config/system-config.js

@@ -4,6 +4,8 @@ const fs = require('fs');
 const pathExists = require('../util/path-exists');
 const { systemConfigurationSchema } = require('../util/config-file-validator');
 const { deepmerge } = require('../util/deepmerge');
+const pathExistsSync = require('../util/path-exists-sync');
+const KnownError = require('../errors/known-error');
 
 const defaultSystemConfig = {
     analytics: true,
@@ -14,19 +16,45 @@ const systemConfigPath = path.join(os.homedir(), '.cmarc');
 /**
  * @returns {Promise<typeof defaultSystemConfig>}
  */
-const getSystemConfig = async () => {
+const getSystemConfig = async ({ validate = true } = {}) => {
     if (await pathExists(systemConfigPath)) {
         const userSystemConfig = await fs.promises.readFile(systemConfigPath, 'utf-8');
         let userSystemConfigParsed;
         try {
             userSystemConfigParsed = JSON.parse(userSystemConfig);
         } catch (e) {
-            throw new Error(`System configuration file is not a valid JSON!\n\nFile location: ${systemConfigPath}`);
+            throw new KnownError(`System configuration file is not a valid JSON!\n\nFile location: ${systemConfigPath}`);
         }
+
+        if (validate) {
+            try {
+                await systemConfigurationSchema.validateAsync(userSystemConfigParsed);
+            } catch (e) {
+                throw new KnownError(`Configuration file validation error!\n\n${e.message}`);
+            }
+        }
+
+        return deepmerge(defaultSystemConfig, userSystemConfigParsed);
+    }
+
+    return defaultSystemConfig;
+};
+
+const getSystemConfigSync = ({ validate = true } = {}) => {
+    if (pathExistsSync(systemConfigPath)) {
+        const userSystemConfig = fs.readFileSync(systemConfigPath, { encoding: 'utf-8' });
+        let userSystemConfigParsed;
         try {
-            await systemConfigurationSchema.validateAsync(userSystemConfigParsed);
+            userSystemConfigParsed = JSON.parse(userSystemConfig);
         } catch (e) {
-            throw new Error(`Configuration file validation error!\n\n${e.message}`);
+            throw new KnownError(`System configuration file is not a valid JSON!\n\nFile location: ${systemConfigPath}`);
+        }
+        if (validate) {
+            try {
+                systemConfigurationSchema.validate(userSystemConfigParsed);
+            } catch (e) {
+                throw new KnownError(`Configuration file validation error!\n\n${e.message}`);
+            }
         }
 
         return deepmerge(defaultSystemConfig, userSystemConfigParsed);
@@ -48,5 +76,6 @@ const getSystemConfigTask = () => ({
 module.exports = {
     defaultSystemConfig,
     getSystemConfigTask,
-    getSystemConfig
+    getSystemConfig,
+    getSystemConfigSync
 };

package/lib/config/templates/magentorc.template

@@ -3,10 +3,8 @@ alias magento="php $PWD/bin/magento"
 alias m="magento"
 alias composer="php $PWD/node_modules/.create-magento-app-cache/composer/composer.phar"
 alias c="composer"
+<% if (it.varnishEnabled) { %>
+alias cvc="npm run exec varnish varnishadm ban req.url '~ /' && echo 'Varnish cache cleared!'"
+<% } %>
 
 export BASH_SILENCE_DEPRECATION_WARNING=1
-
-echo ""
-echo "Available aliases: php, magento, composer"
-echo "Available shortcuts: magento -> m, composer -> c"
-echo ""

package/lib/config/templates/nginx.template.conf

@@ -1,8 +1,3 @@
-real_ip_header X-Forwarded-For;
-set_real_ip_from 10.0.0.0/8;
-set_real_ip_from 172.0.0.0/8;
-real_ip_recursive on;
-
 upstream fastcgi_backend {
     # use tcp connection
     server <%= it.hostMachine %>:<%= it.ports.fpm %>;
@@ -10,16 +5,7 @@ upstream fastcgi_backend {
 
 server {
     listen <%= it.hostPort %>;
-    <% if (it.config.ssl.enabled) { %>listen 443 ssl;<% } %>
-
-    <% if (it.config.ssl.enabled) { %>server_name <%= it.networkToBindTo %>;
-
-    ssl_certificate /etc/nginx/conf.d/ssl_certificate.pem;
-    ssl_certificate_key /etc/nginx/conf.d/ssl_certificate-key.pem;
-    ssl_protocols TLSv1.2;<% } else if (it.config.host) { %>server_name <%= it.config.host %>;
-    <% } else { %>
     server_name _;
-    <% } %>
 
     set $MAGE_ROOT <%= it.mageRoot %>;
     resolver 127.0.0.11;

package/lib/config/templates/php.template.ini

@@ -1812,7 +1812,7 @@ ldap.max_links = -1
 
 [opcache]
 ; Determines if Zend OPCache is enabled
-; opcache.enable=1
+opcache.enable=1
 
 ; Determines if Zend OPCache is enabled for the CLI version of PHP
 ;opcache.enable_cli=0
@@ -1838,19 +1838,19 @@ ldap.max_links = -1
 
 ; When disabled, you must reset the OPcache manually or restart the
 ; webserver for changes to the filesystem to take effect.
-;opcache.validate_timestamps=1
+opcache.validate_timestamps=1
 
 ; How often (in seconds) to check file timestamps for changes to the shared
 ; memory storage allocation. ("1" means validate once per second, but only
 ; once per request. "0" means always validate)
-;opcache.revalidate_freq=2
+opcache.revalidate_freq=2
 
 ; Enables or disables file search in include_path optimization
 ;opcache.revalidate_path=0
 
 ; If disabled, all PHPDoc comments are dropped from the code to reduce the
 ; size of the optimized code.
-; opcache.save_comments=1
+opcache.save_comments=1
 
 ; If enabled, compilation warnings (including notices and deprecations) will
 ; be recorded and replayed each time a file is included. Otherwise, compilation
@@ -2038,3 +2038,5 @@ xdebug.mode=off
 <% } %>
 
 <% } %>
+
+apc.enabled=1

package/lib/config/templates/ssl-terminator.template.conf

@@ -0,0 +1,27 @@
+real_ip_header X-Forwarded-For;
+set_real_ip_from 10.0.0.0/8;
+set_real_ip_from 172.0.0.0/8;
+real_ip_recursive on;
+
+server {
+    listen <%= it.hostPort %>;
+<% if (it.config.ssl.enabled) { %>  listen 443 ssl;
+    server_name <%= it.networkToBindTo %>;
+
+    ssl_certificate /etc/nginx/conf.d/ssl_certificate.pem;
+    ssl_certificate_key /etc/nginx/conf.d/ssl_certificate-key.pem;
+    ssl_protocols TLSv1.2;<% } %>
+
+    server_name <% if (it.config.host) { %><%= it.config.host %><% } else { %>_<% } %>;
+
+    location / {
+        proxy_buffer_size   128k;
+        proxy_buffers   4 256k;
+        proxy_busy_buffers_size   256k;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header Host $http_host;
+
+        proxy_pass http://<%= it.hostMachine %>:<% if (it.config.configuration.varnish.enabled) { %><%= it.ports.varnish %><% } else { %><%= it.ports.app %><% } %>;
+    }
+}