allow nginx/apache group to write to FPM socket (#1227)

ansible-collections · May 16, 2024 · 70c0f69 · 70c0f69
1 parent 1fccef2
commit 70c0f69
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/changelogs/fragments/1227-fpm-socket-permissions.yml b/changelogs/fragments/1227-fpm-socket-permissions.yml
@@ -0,0 +1,2 @@
+bugfixes:
+  - zabbix_web - make the FPM socket group-writable so the web server can properly forward requests to the FPM process
diff --git a/roles/zabbix_web/templates/php-fpm.conf.j2 b/roles/zabbix_web/templates/php-fpm.conf.j2
@@ -8,7 +8,7 @@ listen.acl_users = {{ zabbix_php_fpm_conf_user if zabbix_php_fpm_conf_user is de
 {% endif %}
 listen.owner = {{ zabbix_php_fpm_conf_user if zabbix_php_fpm_conf_user is defined else zabbix_web_user }}
 listen.group = {{ _nginx_group if zabbix_web_http_server=='nginx' else _apache_group }}
-listen.mode = 0644
+listen.mode = 0660
 listen.allowed_clients = 127.0.0.1
 
 pm = dynamic
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		bugfixes:
		- zabbix_web - make the FPM socket group-writable so the web server can properly forward requests to the FPM process