diff --git a/etc/systemd/system/php8.1-fpm.service b/etc/systemd/system/php8.1-fpm.service new file mode 100644 index 0000000..464bb7b --- /dev/null +++ b/etc/systemd/system/php8.1-fpm.service @@ -0,0 +1,16 @@ +# This service is actually a systemd target, +# but we are using a service since targets cannot be reloaded. + +[Unit] +Description=The PHP 8.1 FastCGI Process Manager (multi instance master) +Documentation=man:php-fpm8.1(8) +After=network.target + +[Service] +Type=oneshot +RemainAfterExit=yes +ExecStart=/bin/true +ExecReload=/bin/true + +[Install] +WantedBy=multi-user.target diff --git a/etc/systemd/system/php8.1-fpm@.service b/etc/systemd/system/php8.1-fpm@.service new file mode 100644 index 0000000..6f8f253 --- /dev/null +++ b/etc/systemd/system/php8.1-fpm@.service @@ -0,0 +1,35 @@ +[Unit] +Description=The PHP 8.1 FastCGI Process Manager (instance %i) +Documentation=man:php-fpm8.1(8) +After=network.target +PartOf=php8.1-fpm.service +ReloadPropagatedFrom=php8.1-fpm.service + +[Service] +Type=notify +PIDFile=/run/php/php8.1-fpm-%i.pid +ExecStart=/usr/sbin/php-fpm8.1 --nodaemonize --fpm-config /etc/php/8.1/fpm/php-fpm-%i.conf +ExecReload=/bin/kill -USR2 $MAINPID +LimitNOFILE=100000 +TimeoutStartSec=300 +ProtectSystem=strict +PrivateTmp=true +NoNewPrivileges=true +PrivateDevices=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectControlGroups=true +LockPersonality=true +SystemCallArchitectures=native +ReadWritePaths=-/var/log/ +ReadWritePaths=-/var/run/ +ReadWritePaths=-/run/ +InaccessiblePaths=-/root/ +CPUQuota=100% +MemoryHigh=25% +MemoryMax=35% +RuntimeDirectory=php +RuntimeDirectoryPreserve=yes + +[Install] +WantedBy=multi-user.target diff --git a/etc/systemd/system/php8.1-fpm@default.service b/etc/systemd/system/php8.1-fpm@default.service new file mode 100644 index 0000000..6dd4f2b --- /dev/null +++ b/etc/systemd/system/php8.1-fpm@default.service @@ -0,0 +1,39 @@ +[Unit] +Description=The PHP 8.1 FastCGI Process Manager +Documentation=man:php-fpm8.1(8) +After=network.target +PartOf=php8.1-fpm.service +ReloadPropagatedFrom=php8.1-fpm.service + +[Service] +Type=notify +PIDFile=/run/php/php8.1-fpm.pid +ExecStart=/usr/sbin/php-fpm8.1 --nodaemonize --fpm-config /etc/php/8.1/fpm/php-fpm.conf +ExecReload=/bin/kill -USR2 $MAINPID +LimitNOFILE=100000 +TimeoutStartSec=300 +ProtectSystem=strict +PrivateTmp=true +# sendmail requires it... +#NoNewPrivileges=true +PrivateDevices=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectControlGroups=true +LockPersonality=true +SystemCallArchitectures=native +ReadWritePaths=-/var/log/ +ReadWritePaths=-/var/run/ +ReadWritePaths=-/run/ +ReadWritePaths=-/var/local/squirrelmail/ +ReadWritePaths=-/var/www/ +ReadWritePaths=-/var/spool/postfix/ +InaccessiblePaths=-/root/ +CPUQuota=100% +MemoryHigh=25% +MemoryMax=35% +RuntimeDirectory=php +RuntimeDirectoryPreserve=yes + +[Install] +WantedBy=multi-user.target