bjorneandClaude Fable 5.1
25b481e2ae
Stripped from the internal repo: per-box deploy trees, Go services (nodelist/astmeta/proxy/svxdr), deploy/sync scripts and all secrets. Config templates for nginx, PHP-FPM, Redis and tmpfiles live in install/ with CHANGEME placeholders. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
19 lines
752 B
Plaintext
19 lines
752 B
Plaintext
; Separate PHP-FPM pool for /auth/admin_reflector_api.php.
|
|
; Install: sudo cp install/php-fpm-svxadmin.conf /etc/php/8.4/fpm/pool.d/svxadmin.conf
|
|
; sudo systemctl restart php8.4-fpm
|
|
; Adjust "8.4" to your PHP version (also in the nginx config).
|
|
[svxadmin]
|
|
user = www-data
|
|
group = www-data
|
|
listen = /run/php/php8.4-fpm-svxadmin.sock
|
|
listen.owner = www-data
|
|
listen.group = www-data
|
|
pm = ondemand
|
|
pm.max_children = 4
|
|
pm.process_idle_timeout = 30s
|
|
request_terminate_timeout = 300
|
|
|
|
; exec() stays available for the scoped sudo helpers used by admin_reflector_api.php;
|
|
; everything else that spawns processes is disabled.
|
|
php_admin_value[disable_functions] = passthru,shell_exec,system,popen,proc_open,proc_close,pcntl_exec,dl,phpinfo,show_source
|