This document discusses DevOps practices for PHP environments. It covers PHP evolution and modern standards, Laravel features and development workflows using GitHub flow. It also discusses local development environments, continuous integration, production environments, recipes for common tasks, monitoring, security, backups and lessons learned. The presenters have many years of experience with PHP, Laravel and DevOps.

1. DevOps in PHP environment
1

2. Who?!
Gabriel Koerich
Over 10 years of experience in PHP and 6 in Laravel
Founder of Bulldesk, responsible for finance and technology
gabriel@bulldesk.com.br
twi3er.com/gabrielmkoerich
github.com/gabrielkoerich
2

3. 3

4. Who?!
Evaldo Felipe
Blackops @ Neoway
8 years of SysAdmin
2,5 years of DevOps
contato@evaldofelipe.com
twi1er.com/evaldofelipe
4

5. 5

6. Agenda
• PHP Sucks?!
• Workflow
• Infrastructure
• Tools
• Issues and Fixes
6

7. PHP Sucks?!
7

8. PHP Sucks?!
• Easy for beginners
• Easy to "deploy"
• PHP mixed in HTML
• No conven>ons for func>on names
• Wordpress
8

9. I don't know how to stop it, there
was never any intent to write a
programming language
— Rasmus Lerdorf
9

10. PHP Evolu)on
Version Evolu,on
< 5.3 !
5.3 Namespaces, closures
5.4 Traits, [] for arrays
5.5 OPCache, finally on try blocks
5.6 Argument unpacking (...$args)
6.0 "
7.0 Performance (thanks to HHVM), return and scalar types,
improved excepPons
7.1 Nullable types (?int), catch mulPple excepPons
10

11. I have absolutely no idea how to
write a programming language, I just
kept adding the next logical step on
the way.
— Rasmus Lerdorf
11

12. Community Evolu-on
Autoloaders, Composer & Packagist
Frameworks (Zend, Symfony, Laravel)
PHP FIG and PSRs
Standards
PSR-1: Basic Coding
PSR-2: Coding Style Guide
PSR-3: Logger Interface
PSR-4: Autoloader
PSR-5: Caching Interface
12

13. Modern PHP
/**
* Create a new instance.
*/
public function __construct(AutomationRepository $automations)
{
$this->automations = $automations;
}
/**
* @Get("automation", as="automation.index")
*/
public function index(Request $request): Response
{
if ($request->expectsJson())) {
return $this->automations->getActive()->pluck('name', 'id');
}
$automations = $this->automations->categorized($request->input('categories'))
->orderBy('name')
->paginate(50);
return new Response(view('pages.automation.index')->with(compact('automations')), 200);
}
13

14. Laravel Features
• Routes & Controllers
• Service Container & Dependency Injec9on
• Migra9ons & ORM
• Ar9san command line
• Queues (beanstalkd, redis, amazon sqs)
• Broadcas9ng (Pusher or socket.io)
14

15. Development Workflow &
Source Management
15

16. Development Workflow & Source
Management
• People
• Workflow
• Rules, code pa4erns, PSRs
• Local environment
• Database dump Migra@ons / Seeds
16

17. Github Flow
• Anything in master is deployable
• Every new branch should be created off of master
• Branches must have descrip<ve names (create-cache-manager,
improve-auth, refactor-acl)
• Pull requests must be reviewed by at least 2 people
• When ready, you should merge and deploy immediately
17

18. Github Flow
18

19. Bulldesk Guidelines
19

20. 20

21. Local Environment
21

22. Laravel Valet
# Install PHP/Composer/MySQL/Redis local
# On MacOS
$ composer global require laravel/valet
# On Linux
$ composer global require cpriego/valet-linux
$ valet install
$ cd ~/Projects && valet park
# All directories in ~/Projects will be acessible at http://{folder}.test
22

23. Vessel (Docker)
PHP 7.2, MySQL 5.7, Redis & NodeJS with NPM, Yarn &
Gulp
# Install docker
$ composer require shipping-docker/vessel
# Register VesselVesselServiceProvide if not on Laravel 5.5
$ php artisan vendor:publish --provider="VesselVesselServiceProvider"
$ bash vessel init
$ ./vessel start
# Acessible at http://localhost
23

24. Con$nuous Integra$on
24

25. Con$nuous Integra$on
• Tests
• Code coverage
• Code quality
25

26. 26

27. 27

28. 28

29. Produc'on/QA Environment
29

30. Provision/Deploy
• Mul% Servers / Instances
• Con%nuous Deploy
• Zero down%me
• Database Replica%on
• PHP 7.2
• SSL & hFp2
30

31. 31

32. 32

33. 33

34. Recipes
34

35. 35

36. Firewall Rules
ACCEPT tcp -- 10.132.103.204 anywhere tcp dpt:mysql
ACCEPT udp -- 10.132.103.204 anywhere udp dpt:mysql
ACCEPT tcp -- 10.132.103.204 anywhere tcp dpt:postgresql
ACCEPT udp -- 10.132.103.204 anywhere udp dpt:postgresql
ACCEPT tcp -- 10.132.103.204 anywhere tcp dpt:11211
ACCEPT udp -- 10.132.103.204 anywhere udp dpt:11211
ACCEPT tcp -- 10.132.103.204 anywhere tcp dpt:6379
ACCEPT udp -- 10.132.103.204 anywhere udp dpt:6379
ACCEPT tcp -- 10.132.103.204 anywhere tcp dpt:11300
ACCEPT udp -- 10.132.103.204 anywhere udp dpt:11300
36

37. 37

38. 38

39. Beanstalkd queues + Supervisor
39

40. 40

41. Issue
Laravel doesn't understand that the request
came from a client and not from the load
balancer
41

42. Trusted Proxy
$ composer require fideloper/proxy
# Register FideloperProxyTrustedProxyServiceProvider
$ php artisan vendor:publish --provider="FideloperProxyTrustedProxyServiceProvider"
// Http/Kernel.php
protected $middleware = [
//...
FideloperProxyTrustProxies::class,
];
// config/trustedproxy.php
return [
'proxies' => [
'192.168.10.10', // Load balancer's IP address
],
//...
42

43. Issue
How to serve some files from a single server?
43

44. Nginx Websocket Proxy
upstream websocket {
least_conn;
server 10.xx.xx.xx:2095; #websocket server ip
}
location /socket.io {
proxy_pass http://websocket;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_connect_timeout 300;
proxy_send_timeout 300;
proxy_read_timeout 300;
send_timeout 300;
}
44

45. Database Replica-on
45

46. Master/Slave Config
//...
'connections' => [
'mysql' => [
'write' => [
'host' => env('DB_WRITE_HOST', env('DB_HOST', '127.0.0.1')),
],
'read' => [
'host' => [
env('DB_WRITE_HOST', env('DB_HOST', '127.0.0.1')),
env('DB_READ_HOST', env('DB_HOST', '127.0.0.1')),
],
],
'backup' => [
'host' => env('DB_BACKUP_HOST', env('DB_READ_HOST', '127.0.0.1')),
'arguments' => '--single-transaction --skip-tz-utc',
],
//...
];
46

47. 47

48. 48

49. 49

50. 50

51. .env
REDIS_HOST=
BEANSTALKD_HOST=
DB_HOST=
DB_WRITE_HOST=
DB_READ_HOST=
DB_BACKUP_HOST=
DB_NAME=
DB_USER=
DB_PASSWORD=
CACHE_DRIVER=redis
SESSION_DRIVER=redis
51

52. 52

53. 53

54. 54

55. 55

56. 56

57. 57

58. Monitoring, Security & Op2miza2on
58

59. Monitoring, Security & Op2miza2on
• CDN
• Monitors
• Logs e excep3ons centralized
• Backups
• Load tests
59

60. 60

61. 61

62. /**
* Set the CloudFlare conneting IP and https if applied.
*
* @param IlluminateHttpRequest $request
* @param Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
if (! app()->environment('production')) {
return $next($request);
}
if ($request->server->has('HTTP_CF_CONNECTING_IP')) {
if ($request->isSecure()) {
$request->server->set('HTTPS', true);
}
$request->server->set('REMOTE_ADDR', $request->server->get('HTTP_CF_CONNECTING_IP'));
return $next($request);
}
logf('CF: Blocked request to %s from %s', [$request->fullUrl(), $request->ip()]);
return new Response('', 404);
}
62

63. 63

64. Issue
How to clear this cache automa0cally?
64

65. /**
* Get the path to a versioned asset file.
*
* @param string $asset
* @return string
*/
function versioned($asset)
{
static $production, $base, $deploy, $sha;
$production = app()->environment('production');
if (is_null($base)) {
$base = $production ? 'https://static.bulldesk.com.br/' : '/';
}
if ($production === false) {
return $base.$asset . '?v=' . str_random(3);
}
if (is_null($deploy)) {
$deploy = public_path('build/deploy');
}
if (is_null($sha) && file_exists($deploy)) {
$sha = file_get_contents($deploy);
}
if (! empty($sha)) {
return $base.$asset . '?v='.$sha;
}
return $base.$asset;
}
<script src="{{ versioned('build/scripts/app.js') }}"></script> //https://static.bulldesk.com.br/build/scripts/app.js?v=fbe06e04c4f8ddd1c94c63f3a001807bace679e0
65

66. Monitoring
66

67. 67

68. 68

69. 69

70. 70

71. 71

72. Issue
How to centralize logs and excep3ons?
72

73. 73

74. 74

75. // LogServiceProvider.php
/**
* The papertrail log format.
*
* @var string
*/
protected $papertrailFormat = '%channel%.%level_name%: %message% %extra%';
/**
* Configure the application's logging facilities.
*
* @return void
*/
public function boot()
{
if ($this->app->environment('production', 'staging')) {
$syslog = new MonologHandlerSyslogHandler('laravel');
$formatter = new MonologFormatterLineFormatter($this->papertrailFormat);
$syslog->setFormatter($formatter);
$this->app['log']->getMonolog()->pushHandler($syslog);
}
}
75

76. 76

77. 77

78. 78

79. 79

80. 80

81. Backups
$ composer require backup-manager/backup-manager
# OR
$ composer require backup-manager/laravel
# OR
$ composer require spatie/laravel-backup
81

82. (...)
/**
* Execute the backup command.
*
* @return void
*/
public function handle()
{
$database = $this->option('database') ?: 'mysql';
$destination = $this->option('destination') ?: 's3';
$destinationPath = 'dump_'. (new Carbon)->format('Y_m_d_H_i_s').'.sql';
$compression = 'gzip';
$this->info('Dumping database and uploading...');
$destinations = [new Destination($destination, $destinationPath)];
$this->backupProcedure->run($database, $destinations, $compression);
$completePath = 'database/' . $destinationPath;
$this->info(sprintf('Successfully dumped %s, compressed with %s and store it to %s at %s',
$database,
$compression,
$destination,
$completePath
));
$last = new Carbon('last day of this month');
// Delete file in 10 days if this not the last
if ((new Carbon)->isSameAs('d/m/Y', $last)) {
$this->info('Scheduled job to delete the backup file ' . $completePath . ' in 10 days.');
dispatch((new DeleteFile($completePath . '.gz', 's3_backup'))->delay(24 * 60 * 60 * 10));
}
}
82

83. Then
83

84. Now
84

85. Lessons Learned
85

86. 1. Don't op*mize or escale
prematurely, but be prepared for
this.
86

87. 2. Time is money.
87

88. 3. Use microservices only if you can
maintain them.
88

89. 4. Study/learn and enjoy everything
the internet gives you for free.
89

90. 90

91. 91

92. Thanks!
92

93. We're hiring!
Ques%ons?
bulldesk.com.br
gabriel@bulldesk.com.br
twi3er.com/gabrielmkoerich
93

94. Ref
en.wikiquote.org/wiki/Rasmus_Lerdorf
guides.github.com/introduc9on/flow
github.com/gabrielkoerich/guidelines
vessel.shippingdocker.com
docs.spa9e.be/laravel-backup
gabrielkoerich.com/talks/infra
php-fig.org
94