---
- name: install php and extensions
  apt:
    pkg:
    - php
    - php-fpm
    - php-common # ctype, iconv, json, libxml, simplexml, zip, zlib, curl, fileinfo, bz2, openssl, ftp, exif, gmp
    - php-ldap
    - php-gd
    - php-imagick
    - libmagickcore-6.q16-6-extra # SVG support for php-imagick
    - php-xml
    - php-mbstring
    - php-opcache
    - php-imap
    - php-intl # intl
    #- php-mcrypt
    #- php-smbclient
    - php-net-ftp
    - php-exif
    - php-gmp
    - php-zip
    - php-curl
    - php-bz2
    - php-apcu
    - php-bcmath
    - php-pear
    - php-redis
    # database pdos
    - php-pdo-sqlite
    - php-pdo-pgsql
    - php-pdo-mysql
  notify:
  - restart nginx
  - restart php-fpm

- name: copy nginx php snippet
  copy:
    src: php-fpm/snippet-php
    dest: /etc/nginx/snippets/php
    owner: root
    group: root
    mode: 0644
  notify:
  - reload nginx

- name: copy nginx php upstream
  template:
    src: php-fpm/upstream-php.conf.j2
    dest: /etc/nginx/conf.d/php.conf
    owner: root
    group: root
    mode: 0644
  notify:
  - reload nginx

- name: copy php-fpm config
  template:
    dest: "/etc/php/{{ php_version }}/fpm/pool.d/www.conf"
    src: php-fpm/www.conf.j2
    owner: root
    group: root
    mode: 0644
  notify:
  - restart php-fpm

- name: apply php ini defaults
  set_fact:
    phpini: "{{ phpinidefault|combine( {} if (nginx.php == True) else nginx.php.ini|d({}) ) }}"

- name: copy php-fpm php.ini
  template:
    dest: "/etc/php/{{ php_version }}/fpm/php.ini"
    src: php-fpm/php.ini.j2
    owner: root
    group: root
    mode: 0644
  notify:
  - restart php-fpm

- name: patch logrotate to fix permissions
  lineinfile:
    path: "/etc/logrotate.d/php{{ php_version }}-fpm"
    regexp: '^create 0640 root adm'
    insertafter: '/var/log/php7.3-fpm.log {'
    line: "create 0640 root adm"