From c7e3160233bc9e07afa7227643801b0fe5b5decd Mon Sep 17 00:00:00 2001 From: Bas Zoetekouw Date: Mon, 13 May 2024 15:10:11 +0200 Subject: [PATCH 1/3] allow nginx/apache group to write to FPM socket --- roles/zabbix_web/templates/php-fpm.conf.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/zabbix_web/templates/php-fpm.conf.j2 b/roles/zabbix_web/templates/php-fpm.conf.j2 index e6b02cc9e..3dd337e4d 100644 --- a/roles/zabbix_web/templates/php-fpm.conf.j2 +++ b/roles/zabbix_web/templates/php-fpm.conf.j2 @@ -8,7 +8,7 @@ listen.acl_users = {{ zabbix_php_fpm_conf_user if zabbix_php_fpm_conf_user is de {% endif %} listen.owner = {{ zabbix_php_fpm_conf_user if zabbix_php_fpm_conf_user is defined else zabbix_web_user }} listen.group = {{ _nginx_group if zabbix_web_http_server=='nginx' else _apache_group }} -listen.mode = 0644 +listen.mode = 0660 listen.allowed_clients = 127.0.0.1 pm = dynamic From e6dc91283f4e37b078ed0c9134d2f1683a639ef6 Mon Sep 17 00:00:00 2001 From: Bas Zoetekouw Date: Wed, 15 May 2024 11:34:14 +0200 Subject: [PATCH 2/3] add changelog fragment --- changelogs/fragments/1227-fpm-socket-permissions.yml | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 changelogs/fragments/1227-fpm-socket-permissions.yml diff --git a/changelogs/fragments/1227-fpm-socket-permissions.yml b/changelogs/fragments/1227-fpm-socket-permissions.yml new file mode 100644 index 000000000..d748422d4 --- /dev/null +++ b/changelogs/fragments/1227-fpm-socket-permissions.yml @@ -0,0 +1,2 @@ +bugfixes: + - zabbix_web - make the FPM socket group-writable so the web server can properly forward requests to the FPM process (https://github.com/ansible-collections/community.zabbix/pull/1227) From cb75fee46afdac440d20949971d0d40ba0e4d23e Mon Sep 17 00:00:00 2001 From: Bas Zoetekouw Date: Wed, 15 May 2024 14:58:50 +0200 Subject: [PATCH 3/3] remove PR link --- changelogs/fragments/1227-fpm-socket-permissions.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/changelogs/fragments/1227-fpm-socket-permissions.yml b/changelogs/fragments/1227-fpm-socket-permissions.yml index d748422d4..22dd2f10d 100644 --- a/changelogs/fragments/1227-fpm-socket-permissions.yml +++ b/changelogs/fragments/1227-fpm-socket-permissions.yml @@ -1,2 +1,2 @@ bugfixes: - - zabbix_web - make the FPM socket group-writable so the web server can properly forward requests to the FPM process (https://github.com/ansible-collections/community.zabbix/pull/1227) + - zabbix_web - make the FPM socket group-writable so the web server can properly forward requests to the FPM process