ansible-role-nginx/tasks/php-fpm.yml
2021-12-26 03:23:06 +01:00

83 lines
1.7 KiB
YAML

---
- name: install php and extensions
apt:
pkg:
- php
- php-fpm
- php-common # ctype, iconv, json, libxml, simplexml, zip, zlib, curl, fileinfo, bz2, openssl, ftp, exif, gmp
- php-ldap
- php-gd
- php-imagick
- php-xml
- php-mbstring
- php-opcache
- php-imap
- php-intl # intl
#- php-mcrypt
#- php-smbclient
- php-net-ftp
- php-exif
- php-gmp
- php-zip
- php-curl
# database pdos
- php-pdo-sqlite
- php-pdo-pgsql
- php-pdo-mysql
- php-apcu
- php-bcmath
- php-pear
notify:
- restart nginx
- restart php-fpm
- name: copy nginx php snippet
copy:
src: php-fpm/snippet-php
dest: /etc/nginx/snippets/php
owner: root
group: root
mode: 0644
notify:
- reload nginx
- name: copy nginx php upstream
template:
src: php-fpm/upstream-php.conf.j2
dest: /etc/nginx/conf.d/php.conf
owner: root
group: root
mode: 0644
notify:
- reload nginx
- name: copy php-fpm config
template:
dest: "/etc/php/{{ php_version }}/fpm/pool.d/www.conf"
src: php-fpm/www.conf.j2
owner: root
group: root
mode: 0644
notify:
- restart php-fpm
- name: apply php ini defaults
set_fact:
phpini: "{{ phpinidefault|combine( {} if (nginx.php == True) else nginx.php.ini|d({}) ) }}"
- name: copy php-fpm php.ini
template:
dest: "/etc/php/{{ php_version }}/fpm/php.ini"
src: php-fpm/php.ini.j2
owner: root
group: root
mode: 0644
notify:
- restart php-fpm
- name: patch logrotate to fix permissions
lineinfile:
path: "/etc/logrotate.d/php{{ php_version }}-fpm"
regexp: '^create 0640 root adm'
insertafter: '/var/log/php7.3-fpm.log {'
line: "create 0640 root adm"