Dockerfile

# Use the official PHP with Apache base image
FROM php:8.2-apache

# Copy custom Apache configuration into the image
COPY server-config/custom-apache.conf /etc/apache2/sites-available/000-default.conf

# enable production config so we dont display internal errors
RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"

# Enable necessary Apache modules
RUN a2enmod rewrite

# Copy application source code to the Apache document root
COPY src/ /var/www/html/

# Set permissions for the web root directory (optional)
RUN chown -R www-data:www-data /var/www/html && \
    chmod -R 755 /var/www/html

# Add a new user 'flag' with password 'abc'
RUN echo "flag:0DAYAAR{FLAG3_Why_Is_Apache2_Running_As_ROOT!!}" >> /etc/shadow

# Make /etc/shadow vulnarable
RUN chmod 777 /etc/shadow

# Expose port 80 (optional since Compose can do this)
EXPOSE 80

# Start the Apache service
CMD ["apache2-foreground"]