Allow isolation of php-fpm pools by specifying user/group ownership, and optional chroot

geerlingguy / ansible-role-php

Ansible Role - PHP

https://galaxy.ansible.com/geerlingguy/php/

MIT License

496 stars 442 forks source link

Allow isolation of php-fpm pools by specifying user/group ownership, and optional chroot #424

Closed dw-ec closed 3 months ago

dw-ec commented 3 months ago

To improve security in multi-user systems, it should be possible to isolate users from each other in chrooted PHP-FPM pools.

This PR therefore allows each item in the php_fpm_pools list to have a user and group specified, and also optionally, to have a chroot directory configured for better isolation.