According to the upstream php image:
This image ships with the default php.ini-development and php.ini-production configuration files.
It is strongly recommended to use the production config for images used in production environments!
RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
However, this image does not do that and leaves the two files untouched. Should it be setting up a default ini file, or at least documenting that it's advised?