---
php_sury: true
php_dpkg: /usr/bin/dpkg
php_phpquery: /usr/sbin/phpquery
php_versions:
  '8.1':
    state: absent
    sapis:
      apache2:
        state: absent
      cli:
        state: present
      fpm:
        state: present
      phpdbg:
        state: absent
  '8.0':
    state: present
    sapis:
      apache2:
        state: absent
      cli:
        state: present
      fpm:
        state: present
      phpdbg:
        state: absent
  '7.4':
    state: present
    sapis:
      apache2:
        state: absent
      cli:
        state: present
      fpm:
        state: present
      phpdbg:
        state: absent
  '7.3':
    state: absent
  '7.2':
    state: absent
  '7.1':
    state: absent
  '7.0':
    state: absent
  '5.6':
    state: absent
php_packages:
  - php-fpm
  - php-curl
  - php-date
  - php-gd
  - php-gmp
  - php-json
  - php-imagick
  - php-intl
  - php-mbstring
  - php-mysql
  - php-pear
  - php-soap
  - php-xmlrpc
  - php-zip
  - composer
php_versioned_packages:
  - apcu
  - bcmath
  - bz2
  - cli
  - ctype
  - curl
  - dom
  - exif
  - fileinfo
  - gd
  - geoip
  - iconv
  - imagick
  - imap
  - intl
  - json
  - ldap
  - mbstring
  - mysqli
  - opcache
  - pdo
  - posix
  - simplexml
  - sqlite3
  - readline
  - tokenizer
  - uploadprogress
  - xml
  - xmlreader
  - xmlrpc
  - xmlwriter
  - xsl
  - zip
# NOTE pool.d files cannot enable any functions that are listed as disabled
# here.
# Set this to an empty list prevent disabling of functions
# php_disable_functions: []
php_disable_functions:
  - chgrp
  - chown
  # curl_exec is used by Nextcloud, some MediaWiki extensions and the
  # WordPress Piwik plugin
  # - curl_exec
  # curl_multi_exec is used by the MediaWiki VisualEditor
  # - curl_multi_exec
  - dl
  - exec
  # fsockopen is used by CiviCRM to send email
  # - fsockopen
  - passthru
  - pcntl_alarm
  - pcntl_fork
  - pcntl_waitpid
  - pcntl_wait
  - pcntl_wifexited
  - pcntl_wifstopped
  - pcntl_wifsignaled
  - pcntl_wifcontinued
  - pcntl_wexitstatus
  - pcntl_wtermsig
  - pcntl_wstopsig
  - pcntl_signal
  - pcntl_signal_get_handler
  - pcntl_signal_dispatch
  - pcntl_get_last_error
  - pcntl_strerror
  - pcntl_sigprocmask
  - pcntl_sigwaitinfo
  - pcntl_sigtimedwait
  - pcntl_exec
  - pcntl_getpriority
  - pcntl_setpriority
  - pcntl_async_signals
  - pcntl_unshare
  - popen
  - posix_kill
  - posix_mkfifo
  - posix_setpgid
  - posix_setsid
  - posix_setuid
  # The proc_ functions are used by MediaWiki
  # - proc_close
  # - proc_get_status
  # - proc_nice
  # - proc_open
  # - proc_terminate
  # The shell_exec function is used by Matomo
  # - shell_exec
  - show_source
  - socket_create
  - symlink
  - system
  - system_exec
php_date_timezone: Europe/London
php_max_execution_time: 600
php_default_socket_timeout: "{{ php_max_execution_time }}"
php_max_input_time: 600
php_max_input_nesting_level: 512
php_max_input_vars: 100000
php_memory_limit: 512M
php_post_max_size: 512M
php_upload_max_filesize: 512M
php_max_file_uploads: 60
php_allow_url_include: false
php_mysqli_allow_local_infile: false
php_short_open_tag: false
php_session_save_path: "${TMPDIR}"
php_apc_shm_size: 32M
php_opcache_enable: true
php_opcache_memory_consumption: 1024
php_opcache_interned_strings_buffer: 8
php_opcache_use_cwd: true
php_opcache_validate_timestamps: 1
php_opcache_revalidate_freq: 2
php_opcache_validate_permission: true
php_opcache_validate_root: true
php_opcache_max_accelerated_files: 100000
php_www_pool_enabled: true
php_www_pool_pm: dynamic
php_www_pool_pm_max_children: 4
php_www_pool_pm_process_idle_timeout: 10s
php_www_pool_pm_start_servers: 1
php_www_pool_pm_min_spare_servers: 1
php_www_pool_pm_max_spare_servers: 1
php_www_pool_pm_max_requests: 1000
# if this isn't set then the status is disabled
# php_www_pool_pm_status_path: /status
# if this isn't set then the ping is disabled
# php_www_pool_ping_path: /ping
phpcli_allow_local_infile: false
# Enable email to root with results of grepping for pm.max_children
php_log_grep: false
php_log: "/var/log/php{{ php_version }}-fpm.log"
...
