feat : init project Coltura (CRM/ERP)

Symfony 8 + API Platform 4 + Nuxt 4 monorepo.
Backend: User entity, JWT auth, fixtures.
Frontend: login, dashboard, auth middleware, i18n, @malio/layer-ui.
Docker: dev (ports 8083/3003/5436) + prod multi-stage.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

infra/prod/.env.prod.example

@@ -0,0 +1,16 @@
+APP_ENV=prod
+APP_DEBUG=0
+APP_SECRET=CHANGE_ME_IN_PRODUCTION
+
+POSTGRES_DB=coltura
+POSTGRES_USER=coltura
+POSTGRES_PASSWORD=CHANGE_ME_IN_PRODUCTION
+
+APP_PORT=80
+
+JWT_PASSPHRASE=CHANGE_ME_IN_PRODUCTION
+JWT_COOKIE_SECURE=1
+JWT_TOKEN_TTL=86400
+JWT_COOKIE_TTL=86400
+
+CORS_ALLOW_ORIGIN='^https://coltura\.malio-dev\.fr$'

infra/prod/Dockerfile

@@ -0,0 +1,86 @@
+ARG DOCKER_PHP_VERSION=8.4.6
+
+FROM php:${DOCKER_PHP_VERSION}-fpm-bullseye AS php-base
+
+ARG DOCKER_NODE_VERSION=24.12.0
+ENV DOCKER_NODE_VERSION="${DOCKER_NODE_VERSION}"
+
+# Installer les dépendances et extensions PHP nécessaires
+RUN apt-get update && apt-get install -y \
+        libicu-dev \
+        libpq-dev \
+        libpng-dev \
+        libzip-dev \
+        libxml2-dev \
+        ca-certificates \
+        gnupg \
+        libbz2-dev \
+        libgmp-dev \
+        libldap2-dev \
+        libonig-dev \
+        libsodium-dev \
+        libxslt1-dev \
+        zlib1g-dev \
+        libssl-dev \
+        wget \
+        git \
+        unzip \
+    && docker-php-ext-install -j$(nproc) \
+            intl \
+            zip \
+            bcmath \
+            bz2 \
+            calendar \
+            exif \
+            gd \
+            gettext \
+            gmp \
+            ldap \
+            pcntl \
+            pdo_pgsql \
+            soap \
+            sockets \
+            sysvsem \
+            xsl \
+    && docker-php-ext-enable opcache \
+    && rm -rf /var/lib/apt/lists/* /tmp/*
+
+# Installation de node
+RUN wget -qO- "https://nodejs.org/dist/v${DOCKER_NODE_VERSION}/node-v${DOCKER_NODE_VERSION}-linux-x64.tar.xz" | tar xJC /tmp/ && \
+    cp -r /tmp/node-v${DOCKER_NODE_VERSION}-linux-x64/bin /usr/ && \
+    cp -r /tmp/node-v${DOCKER_NODE_VERSION}-linux-x64/include /usr/ && \
+    cp -r /tmp/node-v${DOCKER_NODE_VERSION}-linux-x64/lib /usr/ && \
+    cp -r /tmp/node-v${DOCKER_NODE_VERSION}-linux-x64/share /usr/ && \
+    rm -rf /tmp/*
+
+# Installation de composer
+RUN curl --insecure https://getcomposer.org/composer.phar -o /usr/bin/composer && chmod +x /usr/bin/composer
+
+WORKDIR /var/www/html
+
+# Copier les fichiers projet
+COPY . /var/www/html
+
+# Installation des dépendances PHP (prod)
+RUN composer install --no-dev --optimize-autoloader --no-interaction
+
+# Génération des clés JWT si absentes
+RUN php bin/console lexik:jwt:generate-keypair --skip-if-exists
+
+# Build du frontend
+RUN cd frontend && npm ci && npm run build:dist && rm -rf node_modules
+
+# Permissions
+RUN chown -R www-data:www-data /var/www/html/var /var/www/html/frontend/dist
+
+# PHP prod config
+COPY infra/deploy/php-prod.ini /usr/local/etc/php/php.ini
+
+EXPOSE 9000
+
+# ── Nginx stage ──
+FROM nginx:1.27-alpine AS nginx
+
+COPY infra/deploy/nginx.conf /etc/nginx/conf.d/default.conf
+COPY --from=php-base /var/www/html/public /var/www/html/public
+COPY --from=php-base /var/www/html/frontend/dist /var/www/html/frontend/dist

infra/prod/docker-compose.prod.yml

@@ -0,0 +1,42 @@
+services:
+  php:
+    container_name: php-coltura-fpm
+    build:
+      context: ../../
+      dockerfile: infra/deploy/Dockerfile
+      target: php-base
+    environment:
+      APP_ENV: prod
+      APP_DEBUG: 0
+      DATABASE_URL: "postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB}?serverVersion=16&charset=utf8"
+    volumes:
+      - uploads_data:/var/www/html/var/uploads
+    depends_on:
+      - db
+    restart: unless-stopped
+
+  nginx:
+    container_name: nginx-coltura
+    build:
+      context: ../../
+      dockerfile: infra/deploy/Dockerfile
+      target: nginx
+    depends_on:
+      - php
+    ports:
+      - "${APP_PORT:-80}:80"
+    restart: unless-stopped
+
+  db:
+    image: postgres:16-alpine
+    environment:
+      POSTGRES_DB: ${POSTGRES_DB}
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+    volumes:
+      - pg_data:/var/lib/postgresql/data
+    restart: unless-stopped
+
+volumes:
+  pg_data:
+  uploads_data:

infra/prod/nginx.conf

@@ -0,0 +1,44 @@
+server {
+    listen 80;
+    server_name _;
+
+    root /var/www/html/frontend/dist;
+    index index.html;
+
+    client_max_body_size 55m;
+
+    location ^~ /api/ {
+        root /var/www/html/public;
+        try_files $uri /index.php?$query_string;
+    }
+
+    location = /api/login_check {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME /var/www/html/public/index.php;
+        fastcgi_param DOCUMENT_ROOT /var/www/html/public;
+        fastcgi_param SCRIPT_NAME /index.php;
+        fastcgi_param PATH_INFO /login_check;
+        fastcgi_param REQUEST_URI /login_check;
+        fastcgi_pass php:9000;
+    }
+
+    location ^~ /bundles/ {
+        root /var/www/html/public;
+        try_files $uri =404;
+    }
+
+    location ~ ^/index\.php(/|$) {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME /var/www/html/public/index.php;
+        fastcgi_param DOCUMENT_ROOT /var/www/html/public;
+        fastcgi_pass php:9000;
+    }
+
+    location ~ \.php$ {
+        return 404;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}

infra/prod/php-prod.ini

@@ -0,0 +1,18 @@
+[Date]
+date.timezone = Europe/Paris
+
+[Upload]
+upload_max_filesize = 50M
+post_max_size = 55M
+
+[opcache]
+opcache.enable = 1
+opcache.memory_consumption = 256
+opcache.max_accelerated_files = 20000
+opcache.validate_timestamps = 0
+opcache.preload = /var/www/html/config/preload.php
+opcache.preload_user = www-data
+
+[Performance]
+realpath_cache_size = 4096K
+realpath_cache_ttl = 600