chore: update docker compose template and PHP 8.5

.docker/data/.gitignore

@@ -1,5 +1,5 @@
 # Ignore everything in this directory
 *
-# Except this file
+# Except
 !.gitignore
-!Readme.md
+!README.md

.docker/nginx.conf

@@ -17,9 +17,7 @@ http {
     include       /etc/nginx/mime.types;
     default_type  application/octet-stream;
 
-    set_real_ip_from 172.16.0.0/16;
-    real_ip_recursive on;
-    real_ip_header X-Forwarded-For;
+    # Note: set_real_ip_from is set in the server block
 
     log_format  main  '$http_x_real_ip - $remote_user [$time_local] "$request" '
                       '$status $body_bytes_sent "$http_referer" '

.docker/templates/default.conf.template

@@ -6,17 +6,24 @@ server {
 
     client_max_body_size ${NGINX_MAX_BODY_SIZE};
 
-    # This also needs to be set in the single server tag and not only in http.
     set_real_ip_from 172.16.0.0/16;
+    set_real_ip_from 192.168.39.0/24;
     real_ip_recursive on;
     real_ip_header X-Forwarded-For;
 
-    location / {
-        # We are co-hosting with the legacy EventDB, so this app is hosted under '/api/v2/' (.env::APP_PATH_PREFIX)
-        # This is configured for Symfony in both 'api_platform.prefix' and 'framework.assets.base_path'. However
-        # Symfony still installs assets in the root path so we need to rewrite the uri to remove '/api/v2/'.
-        rewrite ^${APP_PATH_PREFIX}/(.*) /$1 break;
+    location = /cron-metrics {
+        # Proxy to supercronic metrics
+        proxy_pass http://${NGINX_CRON_METRICS}/metrics;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
 
+    # Project-specific server config (.docker/templates/server.d/*.conf.template).
+    include /etc/nginx/conf.d/server.d/*.conf;
+
+    location / {
         # try to serve file directly, fallback to index.php
         try_files $uri /index.php$is_args$args;
     }

.docker/templates/server.d/app-path-prefix.conf.template

@@ -0,0 +1,4 @@
+# This app shares the domain with event-database-imports, so this app is served under '/api/v2/' (.env::APP_PATH_PREFIX).
+# This is configured for Symfony in both 'api_platform.prefix' and 'framework.assets.base_path'. However
+# Symfony still installs assets in the root path so we need to rewrite the uri to remove '/api/v2/'.
+rewrite ^${APP_PATH_PREFIX}/(.*) /$1 break;

.github/workflows/api-spec.yml

@@ -31,8 +31,8 @@ jobs:
         uses: actions/cache@v5
         with:
           path: vendor
-          key: vendor-php8.4-${{ hashFiles('composer.lock') }}
-          restore-keys: vendor-php8.4-
+          key: vendor-php8.5-${{ hashFiles('composer.lock') }}
+          restore-keys: vendor-php8.5-
 
       - name: Install dependencies
         run: |

.github/workflows/changelog.yaml

@@ -14,8 +14,6 @@ on:
 jobs:
   changelog:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - name: Checkout
         uses: actions/checkout@v7
@@ -26,4 +24,6 @@ jobs:
         run: git fetch
 
       - name: Check that changelog has been updated.
-        run: git diff --exit-code origin/${{ github.base_ref }} -- CHANGELOG.md && exit 1 || exit 0
+        env:
+          BASE_REF: ${{ github.base_ref }}
+        run: git diff --exit-code "origin/$BASE_REF" -- CHANGELOG.md && exit 1 || exit 0

.github/workflows/composer.yaml

@@ -26,20 +26,23 @@
 name: Composer
 
 env:
-  COMPOSE_USER: root
+  COMPOSE_USER: runner
 
 on:
   pull_request:
+    paths: &paths
+      - "composer.json"
+      - "composer.lock"
+      - "docker-compose.yml"
   push:
     branches:
       - main
       - develop
+    paths: *paths
 
 jobs:
   composer-validate:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - uses: actions/checkout@v7
 
@@ -52,8 +55,6 @@ jobs:
 
   composer-normalized:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - uses: actions/checkout@v7
 
@@ -67,8 +68,6 @@ jobs:
 
   composer-audit:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - uses: actions/checkout@v7
 

.github/workflows/markdown.yaml

@@ -22,16 +22,17 @@ name: Markdown
 
 on:
   pull_request:
+    paths: &paths
+      - "**/*.md"
   push:
     branches:
       - main
       - develop
+    paths: *paths
 
 jobs:
   markdown-lint:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - name: Checkout
         uses: actions/checkout@v7

.github/workflows/php.yaml

@@ -34,14 +34,20 @@
 name: Symfony PHP
 
 env:
-  COMPOSE_USER: root
+  COMPOSE_USER: runner
 
 on:
   pull_request:
+    paths: &paths
+      - "**/*.php"
+      - "composer.json"
+      - "composer.lock"
+      - "docker-compose.yml"
   push:
     branches:
       - main
       - develop
+    paths: *paths
 
 jobs:
   coding-standards:

.github/workflows/pr.yaml

@@ -17,8 +17,8 @@ jobs:
         uses: actions/cache@v5
         with:
           path: vendor
-          key: vendor-php8.4-${{ hashFiles('composer.lock') }}
-          restore-keys: vendor-php8.4-
+          key: vendor-php8.5-${{ hashFiles('composer.lock') }}
+          restore-keys: vendor-php8.5-
 
       - name: Start docker compose setup and install site
         run: |
@@ -57,8 +57,8 @@ jobs:
         uses: actions/cache@v5
         with:
           path: vendor
-          key: vendor-php8.4-${{ hashFiles('composer.lock') }}
-          restore-keys: vendor-php8.4-
+          key: vendor-php8.5-${{ hashFiles('composer.lock') }}
+          restore-keys: vendor-php8.5-
 
       - name: Install dependencies
         run: |
@@ -81,8 +81,8 @@ jobs:
         uses: actions/cache@v5
         with:
           path: vendor
-          key: vendor-php8.4-${{ hashFiles('composer.lock') }}
-          restore-keys: vendor-php8.4-
+          key: vendor-php8.5-${{ hashFiles('composer.lock') }}
+          restore-keys: vendor-php8.5-
 
       - name: Install dependencies
         run: |

.github/workflows/twig.yaml

@@ -24,20 +24,24 @@
 name: Twig
 
 env:
-  COMPOSE_USER: root
+  COMPOSE_USER: runner
 
 on:
   pull_request:
+    paths: &paths
+      - "**/*.twig"
+      - "composer.json"
+      - "composer.lock"
+      - "docker-compose.yml"
   push:
     branches:
       - main
       - develop
+    paths: *paths
 
 jobs:
   twig-lint:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
     steps:
       - name: Checkout
         uses: actions/checkout@v7

.github/workflows/yaml.yaml

@@ -22,10 +22,14 @@ name: YAML
 
 on:
   pull_request:
+    paths: &paths
+      - "**/*.yml"
+      - "**/*.yaml"
   push:
     branches:
       - main
       - develop
+    paths: *paths
 
 jobs:
   yaml-lint:
@@ -38,4 +42,4 @@ jobs:
           docker network create frontend
 
       - run: |
-          docker compose run --rm prettier '**/*.{yml,yaml}' --check
+          docker compose run --rm prettier --no-editorconfig '**/*.{yml,yaml}' --check

.markdownlintignore

@@ -5,6 +5,8 @@
 vendor/
 node_modules/
 LICENSE.md
+# Python
+.venv/
 # Drupal
 web/*.md
 web/core/

.php-cs-fixer.dist.php

@@ -1,4 +1,5 @@
 <?php
+
 // This file is copied from config/symfony/php/.php-cs-fixer.dist.php in https://github.com/itk-dev/devops_itkdev-docker.
 // Feel free to edit the file, but consider making a pull request if you find a general issue with the file.
 
@@ -16,8 +17,8 @@
 $config->setFinder($finder);
 
 $config->setRules([
-  '@Symfony' => true,
-  'phpdoc_align' => false,
+    '@Symfony' => true,
+    'phpdoc_align' => false,
 ]);
 
 return $config;

.prettierrc.yaml

@@ -3,6 +3,13 @@
 
 # https://prettier.io/docs/configuration
 overrides:
+  # https://taskfile.dev/docs/styleguide
+  - files:
+      - "Taskfile.{yml,yaml}"
+    options:
+      tabWidth: 2
+      singleQuote: true
+
   # Symfony config
   - files:
       - "config/**/*.{yml,yaml}"

CHANGELOG.md

@@ -8,6 +8,9 @@ See [keep a changelog] for information about writing changes to this log.
 
 ## [Unreleased]
 
+- [PR-70](https://github.com/itk-dev/event-database-api/pull/70)
+  Update the docker compose template (itk-version 3.2.4) and the PHP 8.5 image
+
 ## [1.3.0] - 2026-11-04
 
 - [PR-62](https://github.com/itk-dev/event-database-api/pull/62)

CLAUDE.md

@@ -11,7 +11,7 @@ API platform front-end for the Danish event database used by the municipality of
 `migrations/` and `src/Entity/` directories are empty).
 
 Stack: PHP 8.3+, Symfony 7.4, API Platform 4.3, Elasticsearch 8.x. Runs entirely in Docker via
-`itkdev/php8.4-fpm` + nginx.
+`itkdev/php8.5-fpm` + nginx.
 
 ## Common commands