Use two Dockerfiles, move Docker stuff to /docker

docker/nginx/Dockerfile

@@ -0,0 +1,8 @@
+FROM nginx:1.25.3-alpine
+
+COPY . /code
+RUN /code/docker/common-setup.sh
+
+
+CMD ["nginx", "-g", "daemon off;"]
+EXPOSE 80 443

docker/nginx/leftypol.conf

@@ -0,0 +1,68 @@
+upstream php-upstream {
+    server php:9000;
+}
+
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server ipv6only=on;
+    server_name leftypol;
+    root /var/www-leftypol;
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header X-Content-Type-Options "nosniff";
+
+    index index.html index.php;
+
+    charset utf-8;
+
+    location ~ ^([^.\?]*[^\/])$ {
+       try_files                 $uri @addslash;
+    }
+
+    # Expire rules for static content
+    # Media: images, icons, video, audio, HTC
+    location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc)$ {
+    	expires 1M;
+    	access_log off;
+    	log_not_found off;
+    	add_header Cache-Control "public";
+    }
+    # CSS and Javascript
+    location ~* \.(?:css|js)$ {
+    	expires 1y;
+    	access_log off;
+    	log_not_found off;
+    	add_header Cache-Control "public";
+    }
+
+    location ~* \.(html)$ {
+        expires -1;
+    }
+
+    location @addslash {
+       return                    301 $uri/;
+    }
+
+    location / {
+         try_files $uri $uri/ /index.php$is_args$args;
+    }
+
+    client_max_body_size 2G;
+
+    location ~ \.php$ {
+        proxy_set_header X-Real-IP  $remote_addr;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header X-Request-Id $x_request_id;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header Forwarded-Request-Id $x_request_id;
+        fastcgi_pass php-upstream;
+        fastcgi_index index.php;
+        fastcgi_buffers 16 16k;
+        fastcgi_buffer_size 32k;
+        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
+        fastcgi_read_timeout 600;
+        include fastcgi_params;
+    }
+
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location = /robots.txt  { access_log off; log_not_found off; }
+}

docker/nginx/nginx.conf

@@ -0,0 +1,33 @@
+# This and proxy.conf are based on
+# https://github.com/dead-guru/devichan/blob/master/nginx/nginx.conf
+
+user  leftypol;
+worker_processes  4;
+# daemon off;
+# error_log  /var/log/nginx/error.log warn;
+error_log /dev/stdout warn;
+pid        /var/run/nginx.pid;
+events {
+    worker_connections  1024;
+}
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+    #access_log  /var/log/nginx/access.log;
+    # Switch logging to console out to view via Docker
+    access_log /dev/stdout;
+    error_log /dev/stdout warn;
+    sendfile        on;
+    keepalive_timeout  5;
+
+    gzip              on;
+    gzip_http_version 1.0;
+    gzip_vary         on;
+    gzip_comp_level   6;
+    gzip_types        text/xml text/plain text/css application/xhtml+xml application/xml application/rss+xml application/atom_xml application/x-javascript application/x-httpd-php;
+    gzip_disable      "MSIE [1-6]\.";
+
+
+    include /etc/nginx/conf.d/*.conf;
+    include /etc/nginx/sites-available/*.conf;
+}

docker/nginx/proxy.conf

@@ -0,0 +1,40 @@
+proxy_cache_path  /var/cache/nginx levels=1:2 keys_zone=czone:4m max_size=50m inactive=120m;
+proxy_temp_path   /var/tmp/nginx;
+proxy_cache_key   "$scheme://$host$request_uri";
+
+
+map $http_forwarded_request_id $x_request_id {
+	""          $request_id;
+	default     $http_forwarded_request_id;
+}
+
+map $http_forwarded_forwarded_host $forwardedhost {
+	""          $host;
+	default     $http_forwarded_forwarded_host;
+}
+
+
+map $http_x_forwarded_proto $fcgi_https {
+	default "";
+	https on;
+}
+
+map $http_x_forwarded_proto $real_scheme {
+	default $scheme;
+	https https;
+}
+
+proxy_set_header  Host               $host;
+proxy_set_header  X-Real-IP          $remote_addr;
+proxy_set_header  X-Forwarded-Host   $host;
+proxy_set_header  X-Forwarded-Server $host;
+
+real_ip_header X-Forwarded-For;
+
+set_real_ip_from 10.0.0.0/8;
+set_real_ip_from 172.16.0.0/12;
+set_real_ip_from 172.18.0.0/12;
+set_real_ip_from 192.168.0.0/24;
+set_real_ip_from 127.0.0.0/8;
+
+real_ip_recursive on;