; Separate PHP-FPM pool for /auth/admin_reflector_api.php. ; Install: sudo cp install/php-fpm-svxadmin.conf /etc/php/8.4/fpm/pool.d/svxadmin.conf ; sudo systemctl restart php8.4-fpm ; Adjust "8.4" to your PHP version (also in the nginx config). [svxadmin] user = www-data group = www-data listen = /run/php/php8.4-fpm-svxadmin.sock listen.owner = www-data listen.group = www-data pm = ondemand pm.max_children = 4 pm.process_idle_timeout = 30s request_terminate_timeout = 300 ; exec() stays available for the scoped sudo helpers used by admin_reflector_api.php; ; everything else that spawns processes is disabled. php_admin_value[disable_functions] = passthru,shell_exec,system,popen,proc_open,proc_close,pcntl_exec,dl,phpinfo,show_source