Production runtime image doesn't need git (composer install runs in a separate stage); cuts a non-trivial CVE surface. opcache.preload_user without opcache.preload produces a startup warning — drop it; we don't have a preload script. Image still builds cleanly and php-fpm boots without warnings. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
4.5 KiB
4.5 KiB