Merge pull request #463 from jdeathe/centos-6-httpd24u-php56u-develop

Release changes for 2.2.1

CHANGELOG.md

@@ -6,6 +6,23 @@ Summary of release changes for Version 2.
 
 CentOS-6 6.9 x86_64, Apache 2.4, PHP-FPM 5.6, PHP memcached 2.2, Zend Opcache 7.0.
 
+### 2.2.1 - 2017-09-28
+
+- Updates `php56u` packages to 5.6.31-1.
+- Fixes bootstrap lockfile name to match the one expected by the healthcheck.
+- Adds permissions to restrict access to the healthcheck script.
+- Removes scmi; it's maintained [upstream](https://github.com/jdeathe/centos-ssh/blob/centos-6/src/usr/sbin/scmi).
+- Fixes local port value in scmi install template.
+- Adds use of readonly variables for constants.
+- Adds support for event server MPM in bootstrap.
+- Adds server mpm to the Apache Details logs output.
+- Adds `APACHE_AUTOSTART_HTTPD_BOOTSTRAP` to optionally disable httpd bootstrap.
+- Adds `APACHE_AUTOSTART_HTTPD_WRAPPER` to optionally disable httpd process startup.
+- Adds `APACHE_AUTOSTART_PHP_FPM_WRAPPER` to optionally disable PHP-FPM process startup.
+- Adds `PHP_OPTIONS_SESSION_SAVE_HANDLER` to allow for an external session store.
+- Adds `PHP_OPTIONS_SESSION_SAVE_PATH` to allow for an external session store.
+- Updates source image to [1.8.2 tag](https://github.com/jdeathe/centos-ssh/releases/tag/1.8.2).
+
 ### 2.2.0 - 2017-07-13
 
 - Adds updated `httpd24u` and `php56u` packages to 2.4.27-1 and 5.6.30-2.

Dockerfile

@@ -4,12 +4,12 @@
 # CentOS-6, Apache 2.4, PHP-FPM 5.6, PHP memcached 2.2, Zend Opcache 7.0
 #
 # =============================================================================
-FROM jdeathe/centos-ssh:1.8.1
+FROM jdeathe/centos-ssh:1.8.2
 
 # Use the form ([{fqdn}-]{package-name}|[{fqdn}-]{provider-name})
 ARG PACKAGE_NAME="app"
 ARG PACKAGE_PATH="/opt/${PACKAGE_NAME}"
-ARG PACKAGE_RELEASE_VERSION="0.4.0"
+ARG PACKAGE_RELEASE_VERSION="0.5.0"
 
 # -----------------------------------------------------------------------------
 # IUS Apache 2.4, PHP-FPM 5.6
@@ -20,10 +20,10 @@ RUN rpm --rebuilddb \
 		httpd24u-2.4.27-1.ius.centos6 \
 		httpd24u-tools-2.4.27-1.ius.centos6 \
 		httpd24u-mod_ssl-2.4.27-1.ius.centos6 \
-		php56u-fpm-5.6.30-2.ius.centos6 \
-		php56u-fpm-httpd-5.6.30-2.ius.centos6 \
-		php56u-cli-5.6.30-2.ius.centos6 \
-		php56u-opcache-5.6.30-2.ius.centos6 \
+		php56u-fpm-5.6.31-1.ius.centos6 \
+		php56u-fpm-httpd-5.6.31-1.ius.centos6 \
+		php56u-cli-5.6.31-1.ius.centos6 \
+		php56u-opcache-5.6.31-1.ius.centos6 \
 		php56u-pecl-memcached-2.2.0-6.ius.centos6 \
 	&& yum versionlock add \
 		elinks \
@@ -160,13 +160,15 @@ RUN cp -pf \
 		-e 's~^\[~\n\[~g' \
 		/etc/php.ini \
 		> /etc/php.d/00-php.ini.default \
-	&& sed \
-		-e 's~^;\(user_ini.filename =\)$~\1~g' \
-		-e 's~^;\(cgi.fix_pathinfo=1\)$~\1~g' \
-		-e 's~^;\(date.timezone =\)$~\1 UTC~g' \
-		-e 's~^\(expose_php = \)On$~\1Off~g' \
-		-e 's~^;\(realpath_cache_size = \).*$~\14096k~' \
-		-e 's~^;\(realpath_cache_ttl = \).*$~\1600~' \
+	&& sed -r \
+		-e 's~^;(user_ini.filename =)$~\1~g' \
+		-e 's~^;(cgi.fix_pathinfo=1)$~\1~g' \
+		-e 's~^;(date.timezone =)$~\1 UTC~g' \
+		-e 's~^(expose_php = )On$~\1Off~g' \
+		-e 's~^;(realpath_cache_size = ).*$~\14096k~' \
+		-e 's~^;(realpath_cache_ttl = ).*$~\1600~' \
+		-e 's~^;?(session.save_handler = ).*$~\1"${PHP_OPTIONS_SESSION_SAVE_HANDLER:-files}"~' \
+		-e 's~^;?(session.save_path = ).*$~\1"${PHP_OPTIONS_SESSION_SAVE_PATH:-/var/lib/php/session}"~' \
 		/etc/php.d/00-php.ini.default \
 		> /etc/php.d/00-php.ini \
 	&& sed \
@@ -220,10 +222,7 @@ RUN useradd -r -M -d /var/www/app -s /sbin/nologin app \
 # -----------------------------------------------------------------------------
 ADD src/usr/bin \
 	/usr/bin/
-ADD src/usr/sbin/httpd-bootstrap \
-	src/usr/sbin/httpd-startup \
-	src/usr/sbin/httpd-wrapper \
-	src/usr/sbin/php-fpm-wrapper \
+ADD src/usr/sbin \
 	/usr/sbin/
 ADD src/opt/scmi \
 	/opt/scmi/
@@ -273,7 +272,7 @@ RUN mkdir -p \
 		/etc/services-config/supervisor/supervisord.d/php-fpm-wrapper.conf \
 		/etc/supervisord.d/php-fpm-wrapper.conf \
 	&& chmod 700 \
-		/usr/sbin/{httpd-{bootstrap,startup,wrapper},php-fpm-wrapper}
+		/usr/{bin/healthcheck,sbin/{httpd-{bootstrap,startup,wrapper},php-fpm-wrapper}}
 
 # -----------------------------------------------------------------------------
 # Package installation
@@ -289,6 +288,10 @@ RUN mkdir -p -m 750 ${PACKAGE_PATH} \
 	&& sed -i \
 		-e 's~^description =.*$~description = "This CentOS / Apache / PHP-FPM (FastCGI) service is running in a container."~' \
 		${PACKAGE_PATH}/etc/views/index.ini \
+	&& sed -ri \
+		-e 's~^;?(session.save_handler = ).*$~\1"${PHP_OPTIONS_SESSION_SAVE_HANDLER:-files}"~' \
+		-e 's~^;?(session.save_path = ).*$~\1"${PHP_OPTIONS_SESSION_SAVE_PATH:-/var/lib/php/session}"~' \
+		${PACKAGE_PATH}/etc/php.d/50-php.ini \
 	&& $(\
 		if [[ -f /usr/share/php-pecl-apc/apc.php ]]; then \
 			cp \
@@ -310,14 +313,17 @@ EXPOSE 80 8443 443
 ENV APACHE_CONTENT_ROOT="/var/www/${PACKAGE_NAME}" \
 	BASH_ENV="/usr/sbin/httpd-startup" \
 	ENV="/usr/sbin/httpd-startup"
-ENV APACHE_CUSTOM_LOG_FORMAT="combined" \
+ENV APACHE_AUTOSTART_HTTPD_BOOTSTRAP=true \
+	APACHE_AUTOSTART_HTTPD_WRAPPER=true \
+	APACHE_AUTOSTART_PHP_FPM_WRAPPER=true \
+	APACHE_CUSTOM_LOG_FORMAT="combined" \
 	APACHE_CUSTOM_LOG_LOCATION="var/log/apache_access_log" \
 	APACHE_ERROR_LOG_LOCATION="var/log/apache_error_log" \
 	APACHE_ERROR_LOG_LEVEL="warn" \
-	APACHE_EXTENDED_STATUS_ENABLED="false" \
+	APACHE_EXTENDED_STATUS_ENABLED=false \
 	APACHE_HEADER_X_SERVICE_UID="{{HOSTNAME}}" \
 	APACHE_LOAD_MODULES="authz_core_module authz_user_module log_config_module expires_module deflate_module filter_module headers_module setenvif_module socache_shmcb_module mime_module status_module dir_module alias_module unixd_module version_module proxy_module proxy_fcgi_module" \
-	APACHE_MOD_SSL_ENABLED="false" \
+	APACHE_MOD_SSL_ENABLED=false \
 	APACHE_MPM="prefork" \
 	APACHE_OPERATING_MODE="production" \
 	APACHE_PUBLIC_DIRECTORY="public_html" \
@@ -331,13 +337,15 @@ ENV APACHE_CUSTOM_LOG_FORMAT="combined" \
 	APACHE_SYSTEM_USER="app" \
 	PACKAGE_PATH="${PACKAGE_PATH}" \
 	PHP_OPTIONS_DATE_TIMEZONE="UTC" \
+	PHP_OPTIONS_SESSION_SAVE_HANDLER="files" \
+	PHP_OPTIONS_SESSION_SAVE_PATH="/var/lib/php/session" \
 	SSH_AUTOSTART_SSHD=false \
 	SSH_AUTOSTART_SSHD_BOOTSTRAP=false
 
 # -----------------------------------------------------------------------------
 # Set image metadata
 # -----------------------------------------------------------------------------
-ARG RELEASE_VERSION="2.2.0"
+ARG RELEASE_VERSION="2.2.1"
 LABEL \
 	maintainer="James Deathe <james.deathe@gmail.com>" \
 	install="docker run \

README.md

@@ -12,16 +12,16 @@ Apache PHP web server, loading only a minimal set of Apache modules by default.
 
 ### Tags and respective `Dockerfile` links
 
-- `centos-6-httpd24u-php56u`, `centos-6-httpd24u-php56u-2.2.0`, `2.2.0` [(centos-6-httpd24u-php56u/Dockerfile)](https://github.com/jdeathe/centos-ssh-apache-php/blob/centos-6-httpd24u-php56u/Dockerfile)
-- `centos-6`, `centos-6-1.9.1`, `1.9.1` [(centos-6/Dockerfile)](https://github.com/jdeathe/centos-ssh-apache-php/blob/centos-6/Dockerfile)
+- `centos-6-httpd24u-php56u`, `centos-6-httpd24u-php56u-2.2.1`, `2.2.1` [(centos-6-httpd24u-php56u/Dockerfile)](https://github.com/jdeathe/centos-ssh-apache-php/blob/centos-6-httpd24u-php56u/Dockerfile)
+- `centos-6`, `centos-6-1.10.1`, `1.10.1` [(centos-6/Dockerfile)](https://github.com/jdeathe/centos-ssh-apache-php/blob/centos-6/Dockerfile)
 
 #### centos-6
 
-The latest CentOS-6 Standard Package based release can be pulled from the `centos-6` Docker tag. It is recommended to select a specific release tag - the convention is `centos-6-1.9.1` or `1.9.1` for the [1.9.1](https://github.com/jdeathe/centos-ssh-apache-php/tree/1.9.1) release tag. This build of [Apache](https://httpd.apache.org/), (httpd CentOS package), uses the mpm_prefork_module and php5_module modules for handling [PHP](http://php.net/).
+The latest CentOS-6 Standard Package based release can be pulled from the `centos-6` Docker tag. It is recommended to select a specific release tag - the convention is `centos-6-1.10.1` or `1.10.1` for the [1.10.1](https://github.com/jdeathe/centos-ssh-apache-php/tree/1.10.1) release tag. This build of [Apache](https://httpd.apache.org/), (httpd CentOS package), uses the mpm_prefork_module and php5_module modules for handling [PHP](http://php.net/).
 
 #### centos-6-httpd24u-php56u
 
-The latest CentOS-6 [IUS](https://ius.io) Apache 2.4, PHP-FPM 5.6 based release can be pulled from the `centos-6-httpd24u-php56u` Docker tag. It is recommended to select a specific release tag - the convention is `centos-6-httpd24u-php56u-2.2.0` or `2.2.0` for the [2.2.0](https://github.com/jdeathe/centos-ssh-apache-php/tree/2.2.0) release tag. This build of [Apache](https://httpd.apache.org/), (httpd24u package), uses the mpm_prefork_module and php-fpm for handling [PHP](http://php.net/). This version has the option of using the worker or event MPM.
+The latest CentOS-6 [IUS](https://ius.io) Apache 2.4, PHP-FPM 5.6 based release can be pulled from the `centos-6-httpd24u-php56u` Docker tag. It is recommended to select a specific release tag - the convention is `centos-6-httpd24u-php56u-2.2.1` or `2.2.1` for the [2.2.1](https://github.com/jdeathe/centos-ssh-apache-php/tree/2.2.1) release tag. This build of [Apache](https://httpd.apache.org/), (httpd24u package), uses the mpm_prefork_module and php-fpm for handling [PHP](http://php.net/). This version has the option of using the worker or event MPM.
 
 Included in the build are the [SCL](https://www.softwarecollections.org/), [EPEL](http://fedoraproject.org/wiki/EPEL) and [IUS](https://ius.io) repositories. Installed packages include [OpenSSH](http://www.openssh.com/portable.html) secure shell, [vim-minimal](http://www.vim.org/), [elinks](http://elinks.or.cz) (for fullstatus support), PHP [Memcached](http://pecl.php.net/package/memcached) are installed along with python-setuptools, [supervisor](http://supervisord.org/) and [supervisor-stdout](https://github.com/coderanger/supervisor-stdout). The `centos-6` "Standard" PHP 5.3 build includes PHP [APC](http://pecl.php.net/package/APC) where Zend Opcache is bundled in  PHP 5.6.
 
@@ -97,10 +97,10 @@ $ docker run \
   --volume /:/media/root \
   --env BASH_ENV="" \
   --env ENV="" \
-  jdeathe/centos-ssh-apache-php:2.2.0 \
+  jdeathe/centos-ssh-apache-php:2.2.1 \
   /usr/sbin/scmi install \
     --chroot=/media/root \
-    --tag=2.2.0 \
+    --tag=2.2.1 \
     --name=apache-php.pool-1.1.1
 ```
 
@@ -115,10 +115,10 @@ $ docker run \
   --volume /:/media/root \
   --env BASH_ENV="" \
   --env ENV="" \
-  jdeathe/centos-ssh-apache-php:2.2.0 \
+  jdeathe/centos-ssh-apache-php:2.2.1 \
   /usr/sbin/scmi uninstall \
     --chroot=/media/root \
-    --tag=2.2.0 \
+    --tag=2.2.1 \
     --name=apache-php.pool-1.1.1
 ```
 
@@ -133,10 +133,10 @@ $ docker run \
   --volume /:/media/root \
   --env BASH_ENV="" \
   --env ENV="" \
-  jdeathe/centos-ssh-apache-php:2.2.0 \
+  jdeathe/centos-ssh-apache-php:2.2.1 \
   /usr/sbin/scmi install \
     --chroot=/media/root \
-    --tag=2.2.0 \
+    --tag=2.2.1 \
     --name=apache-php.pool-1.1.1 \
     --manager=systemd \
     --register \
@@ -155,7 +155,7 @@ Since release `centos-6-1.7.2` the install template has been added to the image
 _NOTE:_ A prerequisite of the following examples is that the image has been pulled (or loaded from the release package).
 
 ```
-$ docker pull jdeathe/centos-ssh-apache-php:2.2.0
+$ docker pull jdeathe/centos-ssh-apache-php:2.2.1
 ```
 
 To see detailed information about the image run `scmi` with the `--info` option. To see all available `scmi` options run with the `--help` option.
@@ -164,7 +164,7 @@ To see detailed information about the image run `scmi` with the `--info` option.
 $ eval "sudo -E $(
     docker inspect \
     -f "{{.ContainerConfig.Labels.install}}" \
-    jdeathe/centos-ssh-apache-php:2.2.0
+    jdeathe/centos-ssh-apache-php:2.2.1
   ) --info"
 ```
 
@@ -174,7 +174,7 @@ To perform an installation using the docker name `apache-php.pool-1.2.1` simply
 $ eval "sudo -E $(
     docker inspect \
     -f "{{.ContainerConfig.Labels.install}}" \
-    jdeathe/centos-ssh-apache-php:2.2.0
+    jdeathe/centos-ssh-apache-php:2.2.1
   ) --name=apache-php.pool-1.2.1"
 ```
 
@@ -184,7 +184,7 @@ To uninstall use the *same command* that was used to install but with the `unins
 $ eval "sudo -E $(
     docker inspect \
     -f "{{.ContainerConfig.Labels.uninstall}}" \
-    jdeathe/centos-ssh-apache-php:2.2.0
+    jdeathe/centos-ssh-apache-php:2.2.1
   ) --name=apache-php.pool-1.2.1"
 ```
 
@@ -197,7 +197,7 @@ To see detailed information about the image run `scmi` with the `--info` option.
 ```
 $ sudo -E atomic install \
   -n apache-php.pool-1.3.1 \
-  jdeathe/centos-ssh-apache-php:2.2.0 \
+  jdeathe/centos-ssh-apache-php:2.2.1 \
   --info
 ```
 
@@ -206,14 +206,14 @@ To perform an installation using the docker name `apache-php.pool-1.3.1` simply
 ```
 $ sudo -E atomic install \
   -n apache-php.pool-1.3.1 \
-  jdeathe/centos-ssh-apache-php:2.2.0
+  jdeathe/centos-ssh-apache-php:2.2.1
 ```
 
 Alternatively, you could use the `scmi` options `--name` or `-n` for naming the container.
 
 ```
 $ sudo -E atomic install \
-  jdeathe/centos-ssh-apache-php:2.2.0 \
+  jdeathe/centos-ssh-apache-php:2.2.1 \
   --name apache-php.pool-1.3.1
 ```
 
@@ -222,11 +222,17 @@ To uninstall use the *same command* that was used to install but with the `unins
 ```
 $ sudo -E atomic uninstall \
   -n apache-php.pool-1.3.1 \
-  jdeathe/centos-ssh-apache-php:2.2.0
+  jdeathe/centos-ssh-apache-php:2.2.1
 ```
 
 #### Environment Variables
 
+There are environmental variables available which allows the operator to customise the running container.
+
+##### APACHE_AUTOSTART_HTTPD_BOOTSTRAP, APACHE_AUTOSTART_HTTPD_WRAPPER & APACHE_AUTOSTART_PHP_FPM_WRAPPER
+
+It may be desirable to prevent the startup of the httpd-bootstrap, httpd-wrapper, and/or, php-fpm-wrapper scripts. For example, when using an image built from this Dockerfile as the source for another Dockerfile you could disable services from startup by setting `APACHE_AUTOSTART_HTTPD_WRAPPER` and `APACHE_AUTOSTART_PHP_FPM_WRAPPER` to `false`. The benefit of this is to reduce the number of running processes in the final container. Another use for this would be to make use of the packages installed in the image such as `ab`, `curl`, `elinks`, `php-cli` etc.
+
 ##### APACHE_SERVER_NAME & APACHE_SERVER_ALIAS
 
 The `APACHE_SERVER_NAME` and `APACHE_SERVER_ALIAS` environmental variables are used to set the VirtualHost `ServerName` and `ServerAlias` values respectively. If the value contains the placeholder `{{HOSTNAME}}` it will be replaced with the system `hostname` value; by default this is the container id but the hostname can be modified using the `--hostname` docker create|run parameter.
@@ -435,3 +441,14 @@ To set the timezone for the UK and account for British Summer Time you would use
   --env "PHP_OPTIONS_DATE_TIMEZONE=Europe/London" \
 ...
 ```
+
+##### PHP_OPTIONS_SESSION_SAVE_HANDLER & PHP_OPTIONS_SESSION_SAVE_PATH
+
+Using `PHP_OPTIONS_SESSION_SAVE_HANDLER` and `PHP_OPTIONS_SESSION_SAVE_PATH` together it's possible to configure PHP to use an alternative `session.save_handler` and `session.save_path`. For example if you have a Memcached server running on the host `memcached-server` on the default port `11211` the following configuration will allow session data to be stored in Memcached, allowing session data to be shared between multiple PHP containers.
+
+```
+...
+  --env "PHP_OPTIONS_SESSION_SAVE_HANDLER=memcached" \
+  --env "PHP_OPTIONS_SESSION_SAVE_PATH=memcached-server:11211" \
+...
+```

default.mk

@@ -3,6 +3,9 @@
 define DOCKER_CONTAINER_PARAMETERS
 --name $(DOCKER_NAME) \
 --restart $(DOCKER_RESTART_POLICY) \
+--env "APACHE_AUTOSTART_HTTPD_BOOTSTRAP=$(APACHE_AUTOSTART_HTTPD_BOOTSTRAP)" \
+--env "APACHE_AUTOSTART_HTTPD_WRAPPER=$(APACHE_AUTOSTART_HTTPD_WRAPPER)" \
+--env "APACHE_AUTOSTART_PHP_FPM_WRAPPER=$(APACHE_AUTOSTART_PHP_FPM_WRAPPER)" \
 --env "APACHE_CONTENT_ROOT=$(APACHE_CONTENT_ROOT)" \
 --env "APACHE_CUSTOM_LOG_FORMAT=$(APACHE_CUSTOM_LOG_FORMAT)" \
 --env "APACHE_CUSTOM_LOG_LOCATION=$(APACHE_CUSTOM_LOG_LOCATION)" \
@@ -23,7 +26,9 @@ define DOCKER_CONTAINER_PARAMETERS
 --env "APACHE_SSL_CIPHER_SUITE=$(APACHE_SSL_CIPHER_SUITE)" \
 --env "APACHE_SSL_PROTOCOL=$(APACHE_SSL_PROTOCOL)" \
 --env "APACHE_SYSTEM_USER=$(APACHE_SYSTEM_USER)" \
---env "PHP_OPTIONS_DATE_TIMEZONE=$(PHP_OPTIONS_DATE_TIMEZONE)"
+--env "PHP_OPTIONS_DATE_TIMEZONE=$(PHP_OPTIONS_DATE_TIMEZONE)" \
+--env "PHP_OPTIONS_SESSION_SAVE_HANDLER=$(PHP_OPTIONS_SESSION_SAVE_HANDLER)" \
+--env "PHP_OPTIONS_SESSION_SAVE_PATH=$(PHP_OPTIONS_SESSION_SAVE_PATH)"
 endef
 
 DOCKER_PUBLISH := $(shell \

environment.mk

@@ -49,6 +49,9 @@ SSH_USER_PASSWORD_HASHED ?= false
 SSH_USER_SHELL ?= /bin/bash
 SSH_USER_ID ?= 500:500
 # ------------------------------------------------------------------------------
+APACHE_AUTOSTART_HTTPD_BOOTSTRAP ?= true
+APACHE_AUTOSTART_HTTPD_WRAPPER ?= true
+APACHE_AUTOSTART_PHP_FPM_WRAPPER ?= true
 APACHE_CONTENT_ROOT ?= /var/www/app
 APACHE_CUSTOM_LOG_FORMAT ?= combined
 APACHE_CUSTOM_LOG_LOCATION ?= var/log/apache_access_log
@@ -70,3 +73,5 @@ APACHE_SSL_CIPHER_SUITE ?= ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY
 APACHE_SSL_PROTOCOL ?= All -SSLv2 -SSLv3
 APACHE_SYSTEM_USER ?= app
 PHP_OPTIONS_DATE_TIMEZONE ?= UTC
+PHP_OPTIONS_SESSION_SAVE_HANDLER ?= files
+PHP_OPTIONS_SESSION_SAVE_PATH ?= /var/lib/php/session

src/etc/services-config/httpd/httpd-bootstrap.conf

@@ -1,4 +1,7 @@
 
+APACHE_AUTOSTART_HTTPD_BOOTSTRAP="${APACHE_AUTOSTART_HTTPD_BOOTSTRAP:-true}"
+APACHE_AUTOSTART_HTTPD_WRAPPER="${APACHE_AUTOSTART_HTTPD_WRAPPER:-true}"
+APACHE_AUTOSTART_PHP_FPM_WRAPPER="${APACHE_AUTOSTART_PHP_FPM_WRAPPER:-true}"
 APACHE_CONTENT_ROOT="${APACHE_CONTENT_ROOT:-/var/www/app}"
 APACHE_CUSTOM_LOG_FORMAT="${APACHE_CUSTOM_LOG_FORMAT:-combined}"
 APACHE_CUSTOM_LOG_LOCATION="${APACHE_CUSTOM_LOG_LOCATION:-var/log/apache_access_log}"
@@ -15,9 +18,11 @@ APACHE_RUN_GROUP="${APACHE_RUN_GROUP:-app-www}"
 APACHE_RUN_USER="${APACHE_RUN_USER:-app-www}"
 APACHE_SERVER_ALIAS="${APACHE_SERVER_ALIAS:-}"
 APACHE_SERVER_NAME="${APACHE_SERVER_NAME:-}"
-APACHE_SSL_CERTIFICATE="${APACHE_SSL_CERTIFICATE:-}" \
-APACHE_SSL_CIPHER_SUITE="${APACHE_SSL_CIPHER_SUITE:-"ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS"}" \
-APACHE_SSL_PROTOCOL="${APACHE_SSL_PROTOCOL:-All -SSLv2 -SSLv3}" \
+APACHE_SSL_CERTIFICATE="${APACHE_SSL_CERTIFICATE:-}"
+APACHE_SSL_CIPHER_SUITE="${APACHE_SSL_CIPHER_SUITE:-"ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS"}"
+APACHE_SSL_PROTOCOL="${APACHE_SSL_PROTOCOL:-All -SSLv2 -SSLv3}"
 APACHE_SYSTEM_USER="${APACHE_SYSTEM_USER:-app}"
 PACKAGE_PATH="${PACKAGE_PATH}"
 PHP_OPTIONS_DATE_TIMEZONE="${PHP_OPTIONS_DATE_TIMEZONE:-UTC}"
+PHP_OPTIONS_SESSION_SAVE_HANDLER="${PHP_OPTIONS_SESSION_SAVE_HANDLER:-files}"
+PHP_OPTIONS_SESSION_SAVE_PATH="${PHP_OPTIONS_SESSION_SAVE_PATH:-/var/lib/php/session}"