Blocking bad guys IP :-(

.docker/unit/config.json

@@ -0,0 +1,52 @@
+{
+    "settings": {
+        "http": {
+            "max_body_size": 134217728,
+            "send_timeout": 35,
+            "idle_timeout": 35,
+            "server_version": false
+        }
+    },
+    "listeners": {
+        "*:8080": {
+            "pass": "routes",
+            "ip_filter": ["deny 193.165.96.151", "deny 91.108.255.120", "allow all"]
+        }
+    },
+    "routes": [
+        {
+            "action": {
+                "share": "/app/public$uri",
+                "fallback": {
+                    "pass": "applications/php/index"
+                }
+            }
+        }
+    ],
+    "applications": {
+        "php": {
+            "type": "php",
+            "targets": {
+                "direct": {
+                    "root": "/app/public/"
+                },
+                "index": {
+                    "root": "/app/public/",
+                    "script": "index.php"
+                }
+            },
+            "processes": {
+                "max": 30,
+                "spare": 15,
+                "idle_timeout": 30
+            },
+            "options": {
+                "user": {
+                    "memory_limit": "512M"
+                },
+                "admin": {}
+            }
+        }
+    },
+    "access_log": "/var/log/access.log"
+}

Dockerfile

@@ -6,7 +6,7 @@ ENV APP_ENV="prod" \
 
 RUN rm $PHP_INI_DIR/conf.d/docker-php-ext-xdebug.ini
 
-COPY .docker/on-startup.sh /docker-entrypoint.d/
+COPY .docker/unit/ /docker-entrypoint.d/
 
 COPY composer.json composer.lock symfony.lock ./
 RUN composer install --no-dev --no-interaction --no-scripts

compose.yml

@@ -10,7 +10,8 @@ services:
         tty: true
         volumes:
             - .:/app
-            - .docker/on-startup.sh:/docker-entrypoint.d/on-startup.sh
+            - .docker/unit/config.json:/docker-entrypoint.d/config.json
+            - .docker/unit/on-startup.sh:/docker-entrypoint.d/on-startup.sh
         depends_on:
             - postgres
             - redis