Skip to content
Snippets Groups Projects
Select Git revision
  • 78bc2a30f79aeeabc3b496ca423c282fb8c6cdfa
  • master default protected
  • th/caddy-wip
  • th/caddy
  • th/lego
  • th/acmebot
  • pyzabbix
  • th/keycloak
8 results

main.yml

Blame
  • Code owners
    Assign users and groups as approvers for specific file changes. Learn more.
    main.yml 2.35 KiB
    ---
    
    - name: include debian version specific vars
      include_vars: "{{ debian_version }}.yml"
    
    - name: ensure php-fpm is installed
      apt:
        name: "{{ php_fpm_pkgs }}"
        state: present
      notify:
        - restart php-fpm
    
    - name: ensure php-fpm is configured
      template:
        src: php-fpm.conf.j2
        dest: "/etc/php/{{ php_version }}/fpm/php-fpm.conf"
        owner: root
        group: root
        mode: '0644'
      notify:
        - restart php-fpm
    
    - name: create groups
      group:
        name: "{{ item.name }}"
        system: true
        state: present
      with_items: "{{ fpm_pools|default([]) }}"
    
    - name: create groups
      user:
        name: "{{ item.name }}"
        group: "{{ item.name }}"
        system: true
        home: "/var/www/{{ item.name }}"
        shell: /usr/bin/nologin
        createhome: false
        state: present
      with_items: "{{ fpm_pools|default([]) }}"
    
    - name: ensure we have all the pools we want
      template:
        src: pool.conf.j2
        dest: "/etc/php/{{ php_version }}/fpm/pool.d/{{ item.name }}.conf"
        owner: root
        group: root
        mode: '0644'
      when: debian_version != "jessie"
      with_items: "{{ fpm_pools|default([]) }}"
      notify:
        - restart php-fpm
    
    - name: ensure systemd can start php instances
      template:
        src: "{{ item }}.j2"
        dest: "/etc/systemd/system/{{ item }}"
        owner: root
        group: root
        mode: '0644'
      with_items:
        - php-fpm@.socket
        - php-fpm@.service
      notify:
        - reload systemd service files
        - restart php-fpm
    
    - name: disable standard service file
      systemd:
        name: "php{{ php_version }}-fpm"
        enabled: false