nixopus/php-deploy
skills/php-deploy/SKILL.md
Build and deploy PHP applications — Composer, Laravel, Symfony, FrankenPHP, PHP-FPM, and Dockerfile patterns. Use when deploying a PHP project, or when composer.json or index.php is detected.
$ install --global
skillsauthnpx skillsauth add nixopus/agent php-deployInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 22, 2026, 11:59 PM160.6s1 file scanned
SKILL.md
- name:
- php-deploy
- description:
- Build and deploy PHP applications — Composer, Laravel, Symfony, FrankenPHP, PHP-FPM, and Dockerfile patterns. Use when deploying a PHP project, or when composer.json or index.php is detected.
- version:
- 1.0
PHP Deployment
Detection
Project is PHP if any of these exist:
composer.jsonat the build context rootindex.phpat the root
Versions
PHP 8.2+ only.
composer.json→require.php(e.g.">=8.2").php-versionormise.toml/.tool-versions- Defaults to 8.4
Package Manager
Composer. Detect composer.json and composer.lock.
| Has lock file | Command |
|---|---|
| yes | composer install --no-dev --optimize-autoloader |
| no | composer install --no-dev --optimize-autoloader |
Document Root
Laravel and Symfony use public/. Generic PHP uses the project root.
PHP Extensions
Detected from composer.json → require section with ext-* entries.
Framework Detection
| Signal | Framework |
|---|---|
| artisan | Laravel |
| symfony.lock or config/ structure | Symfony |
| wp-config.php | WordPress |
| index.php + routing | Generic PHP |
Laravel-Specific
When artisan is present:
- Document root:
public/ - Migrations run by default during startup. Skip by setting
SKIP_MIGRATIONS=true. - Storage symlinks, optimization
- Build-time artisan caches: config, routes, views, events
- Storage directory must be writable
Startup Process
- Run migrations (Laravel; skip if
SKIP_MIGRATIONS=true) - Create storage symlinks (Laravel:
php artisan storage:link) - Optimize (Laravel: config/route/view cache)
- Start PHP server (FrankenPHP, PHP-FPM, or
php -S)
Override by providing custom start-container.sh in project root.
Node.js Integration
If package.json detected alongside PHP (e.g. Laravel + Vite):
- Install Node.js
- Run
npm installor equivalent - Execute build scripts from
package.json - Prune dev dependencies in final image
Install Stage Optimization
Copy composer.json + composer.lock first for layer caching.
Caching
RUN --mount=type=cache,target=/root/.composer/cache \
composer install --no-dev --optimize-autoloader
Base Images
| Use case | Image |
|---|---|
| FrankenPHP | dunglas/frankenphp:latest or dunglas/frankenphp:php8.4 |
| PHP-FPM | php:8.4-fpm-alpine |
| CLI / built-in server | php:8.4-cli-alpine |
Dockerfile Patterns
Laravel with FrankenPHP
FROM composer:2 AS deps
WORKDIR /app
COPY composer.json composer.lock ./
RUN composer install --no-dev --optimize-autoloader
FROM php:8.4-cli-alpine AS build
WORKDIR /app
COPY --from=deps /app/vendor ./vendor
COPY . .
RUN php artisan config:cache && php artisan route:cache && php artisan view:cache
FROM dunglas/frankenphp:php8.4
WORKDIR /app
COPY --from=build /app .
EXPOSE 8080
CMD ["frankenphp", "run", "--config", "/app/Caddyfile"]
Generic PHP + Composer
FROM composer:2 AS deps
WORKDIR /app
COPY composer.json composer.lock ./
RUN composer install --no-dev --optimize-autoloader
FROM php:8.4-fpm-alpine
WORKDIR /app
COPY --from=deps /app/vendor ./vendor
COPY . .
EXPOSE 9000
CMD ["php-fpm"]
Gotchas
- Laravel
storage/andbootstrap/cache/must be writable —chownthese directories in the Dockerfile for non-root users - FrankenPHP defaults to port 8080, not 80 — ensure EXPOSE and proxy config match
- Composer
post-autoload-dumpscripts may fail during Docker build if the app isn't fully configured — use--no-scriptsduring install, then runcomposer dump-autoload --optimizeafter copying source - PHP OPcache should be enabled in production (
opcache.enable=1,opcache.validate_timestamps=0) for significant performance gains - Extensions listed in
requireasext-*must be installed in the Docker image — they are not bundled with base PHP images
Related Skills
nixopus/api-catalog
tools
VerifiedTrustedCommunity
Compressed catalog of all Nixopus API operations for the nixopus_api() tool
1SKILL.mdUpdated Apr 26, 2026
nixopus/static-deploy
development
VerifiedTrustedCommunity
Deploy static file sites — Caddy/nginx serving, Staticfile config, and Dockerfile patterns. Use when deploying a static HTML site with no server-side runtime, or when index.html or a Staticfile is detected at the project root.
1SKILL.mdUpdated Apr 22, 2026
nixopus/shell-deploy
devops
VerifiedTrustedCommunity
Deploy shell script applications — interpreter detection, setup scripts, and Dockerfile patterns. Use when deploying a shell script project, or when start.sh is detected.
1SKILL.mdUpdated Apr 22, 2026
nixopus/self-heal
development
VerifiedTrustedCommunity
Self-healing loop for failed deployments — diagnose, fix, redeploy up to 3 attempts, then escalate or rollback. Load when a deployment fails or build errors occur.
1SKILL.mdUpdated Apr 22, 2026