Huge performance lacks wordpress in docker including NGINX in server - wordpress

Question

I have own dedicated server with 4CPU, 16GB RAM ... I installed docker there with following docker-compose configurations:
version: '3.2'
services:
wordpress:
build:
context: './'
dockerfile: Dockerfile.wordpress
container_name: my-test-page-wp
env_file:
- .env
restart: unless-stopped
networks:
- wordpress
working_dir: /var/www/html
volumes:
- ./wp:/var/www/html
- ./config/uploads.ini:/usr/local/etc/php/conf.d/uploads.ini
- ./config/.htaccess:/var/www/html/.htaccess
- ./config/ads.txt:/var/www/html/ads.txt
- ./plugins:/var/www/html/wp-content/plugins
- ./data:/var/www/html/wp-content/uploads
- ./themes:/var/www/html/wp-content/themes
environment:
- WORDPRESS_DB_HOST=${WORDPRESS_DB_HOST}
- WORDPRESS_DB_NAME=${MYSQL_DATABASE}
- WORDPRESS_DB_USER=${MYSQL_USER}
- WORDPRESS_DB_PASSWORD=${MYSQL_PASSWORD}
- WORDPRESS_CONFIG_EXTRA=
define('WP_REDIS_HOST', 'redis' );
define('WP_REDIS_PORT', 6379);
mysqldb:
image: mysql:8
container_name: my-test-page-db
env_file:
- .env
restart: unless-stopped
networks:
- wordpress
environment:
- MYSQL_DATABASE=${MYSQL_DATABASE}
- MYSQL_USER=${MYSQL_USER}
- MYSQL_PASSWORD=${MYSQL_PASSWORD}
- MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
volumes:
- ./db_data:/var/lib/mysql
command:
- '--default-authentication-plugin=mysql_native_password'
nginx:
container_name: nginx
image: nginx:latest
restart: unless-stopped
env_file:
- .env
depends_on:
- wordpress
environment:
- "DOMAIN=${DOMAIN}"
networks:
- wordpress
ports:
- 80:80
- 443:443
volumes:
- "./nginx/conf/:/etc/nginx/conf.d/"
- ./certbot/conf:/etc/nginx/ssl
- ./wp:/var/www/html
- ./config/uploads.ini:/usr/local/etc/php/conf.d/uploads.ini
- ./config/.htaccess:/var/www/html/.htaccess
- ./config/ads.txt:/var/www/html/ads.txt
- ./plugins:/var/www/html/wp-content/plugins
- ./data:/var/www/html/wp-content/uploads
- ./themes:/var/www/html/wp-content/themes
certbot:
container_name: certbot
depends_on:
- wordpress
networks:
- wordpress
image: certbot/certbot:latest
command: certonly --webroot --webroot-path=/var/www/html --email test#test.com --agree-tos --no-eff-email -d my-test-page.games -d www.my-test-page.games --keep-until-expiring
volumes:
- ./certbot/conf:/etc/letsencrypt
- ./certbot/logs:/var/log/letsencrypt
- ./certbot/data:/var/www/html
redis:
image: 'redis:latest'
ports:
- '6379:6379'
restart: always
networks:
- wordpress
expose:
- '6379'
networks:
wordpress:
driver: bridge
I'm using following configuration for NGINX:
server {
listen 80;
listen [::]:80;
server_name my-test-page.games www.my-test-page.games;
return 301 https://my-test-page.games$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name www.my-test-page.games;
# update ssl files as required by your deployment
ssl_certificate /etc/nginx/ssl/live/my-test-page.games/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/my-test-page.games/privkey.pem;
return 301 https://my-test-page.games$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name my-test-page.games;
index index.php index.html index.htm;
root /var/www/html;
server_tokens off;
client_max_body_size 75M;
# update ssl files as required by your deployment
ssl_certificate /etc/nginx/ssl/live/my-test-page.games/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/my-test-page.games/privkey.pem;
# logging
access_log /var/log/nginx/wordpress.access.log;
error_log /var/log/nginx/wordpress.error.log;
location ~ /.well-known/acme-challenge {
allow all;
root /var/www/html;
}
location / {
try_files $uri $uri/ /index.php?$args;
}
# Add trailing slash to */wp-admin requests.
rewrite /wp-admin$ $scheme://$host$uri/ permanent;
# Directives to send expires headers and turn off 404 error logging.
location ~* ^.+\.(eot|otf|woff|woff2|ttf|rss|atom|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
access_log off; log_not_found off; expires max;
}
# Media: images, icons, video, audio send expires headers.
location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm)$ {
expires 1M;
access_log off;
add_header Cache-Control "public";
}
# CSS and Javascript send expires headers.
location ~* \.(?:css|js)$ {
expires 1y;
access_log off;
add_header Cache-Control "public";
}
# HTML send expires headers.
location ~* \.(html)$ {
expires 7d;
access_log off;
add_header Cache-Control "public";
}
# Browser caching of static assets.
location ~* \.(jpg|jpeg|png|gif|ico|css|js|pdf)$ {
expires 7d;
add_header Cache-Control "public, no-transform";
}
# Enable Gzip compression in NGNIX.
gzip on;
gzip_disable "msie6";
gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_buffers 16 8k;
gzip_http_version 1.1;
gzip_min_length 256;
gzip_types
application/atom+xml
application/geo+json
application/javascript
application/x-javascript
application/json
application/ld+json
application/manifest+json
application/rdf+xml
application/rss+xml
application/xhtml+xml
application/xml
font/eot
font/otf
font/ttf
image/svg+xml
text/css
text/javascript
text/plain
text/xml;
# Pass all .php files onto a php-fpm/php-fcgi server.
location ~ [^/]\.php(/|$) {
# Setup var defaults
set $no_cache "";
# If non GET/HEAD, don't cache & mark user as uncacheable for 1 second via cookie
if ($request_method !~ ^(GET|HEAD)$) {
set $no_cache "1";
}
# Don't cache logged in users or commenters
if ( $http_cookie ~* "comment_author_|wordpress_(?!test_cookie)|wp-postpass_|wp-settings-|wp-resetpass-|woocommerce_" ) {
set $no_cache "1";
}
# Don't cache admin URLs
if ($request_uri ~* "/(wp-admin/|wp-login.php)") {
set $no_cache "1";
}
# Don't cache WooCommerce dynamic content
if ($request_uri ~* "/store.*|/cart.*|/my-account.*|/checkout.*|/addons.*|/administrator.*|/resetpass.*|\?(add-to-cart|wc-api|wc-ajax=get_refreshed_fragments)=") {
set $no_cache "1";
}
# Drop no cache cookie if need be
# (for some reason, add_header fails if included in prior if-block)
if ($no_cache = "1") {
add_header Set-Cookie "_mcnc=1; Max-Age=2; Path=/";
add_header X-Microcachable "0";
}
# Bypass cache if no-cache cookie is set
if ($http_cookie ~* "_mcnc") {
set $no_cache "1";
}
# Bypass cache if flag is set
fastcgi_no_cache $no_cache;
fastcgi_cache_bypass $no_cache;
fastcgi_cache_valid 404 30s;
fastcgi_cache_valid 200 10s;
fastcgi_max_temp_file_size 1M;
#Use stale cache items while updating in the background
fastcgi_cache_use_stale updating error timeout invalid_header http_500;
fastcgi_cache_lock on;
fastcgi_cache_lock_timeout 10s;
fastcgi_read_timeout 300;
fastcgi_buffers 8 256k;
fastcgi_buffer_size 128k;
fastcgi_intercept_errors on;
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
if (!-f $document_root$fastcgi_script_name) {
return 404;
}
# This is a robust solution for path info security issue and works with "cgi.fix_pathinfo = 1" in /etc/php.ini (default)
# Ignore headers set by WordPress
fastcgi_ignore_headers Cache-Control Expires;
include fastcgi_params;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_pass wordpress:9000;
}
}
Everything works as expected, perfect performance without any issue, fast loading (~50-100ms)... Problem is when I switch DNS of my website to this server, (where I have ~300 users mer minute) whole performance goes down, meaning, that loading of website is ~20-50seconds(!!!) extremely. .. I tried to use caching (I'm using that but without success) ... Weird completely is that load of my server is ~ 20-30%, not more ...
Maybe (not sure if it has impact) a reason is limit of IO Operations? In ./data there is ~30gb of data...